Skip to main content
  • Live provider implemented against official docs
  • NODE_ENV=production with KEYVAULT_DRIVER=gcp (Cloud KMS); the local key vault is refused in production
  • HTTPS everywhere; webhook URL allowlisting
  • Production merchant auth (not seeded keys)
  • Runtime database role without UPDATE/DELETE on events (see infra/terraform/README.md)
  • No secrets in client bundles