Partner conformance, not just a happy-path demo
This public page never exposes sandbox secrets. It demonstrates the contract partners must pass before a private hosted-API tenant is certified.
OpenAPI 3.1Event catalogCertification reportMaturity + ledger
DEVICE_EVENT
DR 1010_DEVICE_CASH
CR 2010_MERCHANT_MATURING
↓
PROVISIONAL_FUNDED = MATURING
DR 1030_PREFUND_RECEIVABLE
CR 2030_PREFUND_RESTRICTED
↓ independent settlement
MATURED = AVAILABLE
DR 1010_DEVICE_CASH
CR 2010_MERCHANT_MATURING
↓
PROVISIONAL_FUNDED = MATURING
DR 1030_PREFUND_RECEIVABLE
CR 2030_PREFUND_RESTRICTED
↓ independent settlement
MATURED = AVAILABLE
Idempotency contract
All mutating value calls require Idempotency-Key.
- same key + same request → replay first successful response
- same key + different request → reject
- tenant + operation + key is unique
Webhook integrity
HMAC-SHA256 + signed timestamp + five-minute recency window + event-ID dedupe.
Interactive maturity path
NONE
Multi-fault composer
Certification runner
Hosted Edge version 3 contains the v0.5 idempotency + double-entry code, but public browser → private hosted API E2E is still not claimed PASS from this public demo. Live rails remain OFF.
