Evidence level: historically reviewed source and owner proposals; not freshly tested or certified for production.
Design and implementation invariants
- Gateway callback signatures and event provenance must be checked before event normalization.
- The adapter only forwards normalized verified evidence; Wallet owns credit and Inbound Payments owns its settlement acceptance.
Verification still required
- Verify real gateway callback routing, malformed payload handling, signed IPN replay and mTLS handoff in an approved non-financial environment.
- Offline adapter tests do not prove that upstream provider status or durable Wallet credit is final.
How to update
When the owner changes implementation or contract behavior, update this page and the relevant service interfaces. For cross-service changes, also update the platform interface map or decision register. State the actual verification performed; do not inherit historical pass claims without fresh evidence.