Provider connection, approval controls, and assurance.
The local simulator cannot move live money.
Connected to a local simulator with Razorpay-shaped responses.
Credentials are server-only and never exposed to the browser.
HMAC rotation and replay behavior are contract-tested; no live delivery telemetry is connected.
Requires a durable provider-sync worker before production use.
Confirms the selected server-side adapter is available. Test Mode credentials are not probed.
One seller reversal followed by a customer refund.
Resolve a two-variant item match and recalculate.
Assign who fronts a courier-damage refund.
Escalate an insufficient transfer balance.
Resume after one of two reversals has succeeded.
Guardrails applied before execution.
Synthetic safety checks and forecast evidence-not production accuracy.
Seeded allocation and state-transition tests
Replay and idempotency scenarios
Review controls, limitations, and benchmark design