Production Readiness

Checklist

• Sandbox integration completed end-to-end.
• Live API keys generated and stored in a secret manager.
• Webhook endpoint reachable, signed and idempotent.
• Business verified (legal name, address, tax ID).
• Identity verified for beneficial owners.
• First test payment succeeded on live with a real card.
• Refund, dispute and reversal paths implemented.
• Retry / backoff on 429 and 5xx implemented.
• Observability wired — request_id captured on every failure.