Launch checklist

Prepare for production

Use the downloadable report in the Developer workspace as evidence of sandbox progress. The report supports review; it does not authorize production credentials, DNS changes, money movement, or deployment.

Security

• Keep keys in a server-side secret store and separate sandbox from production.
• Verify webhook HMAC over timestamp.raw-body, reject stale timestamps, and compare in constant time.
• Apply least privilege, key rotation, log redaction, dependency scanning, and incident ownership.

Payment correctness

• Generate unique order IDs and make fulfillment idempotent.
• Test success, cancellation, decline, timeout, duplicate webhook, and delayed webhook paths.
• Verify transaction state server-side before fulfillment and reconcile unknown outcomes.

Operations and cutover

• Configure monitored HTTPS webhook endpoints and rehearse replay handling.
• Define alerts, dashboards, support escalation, rollback, and credential revocation.
• Obtain Moneybag product/security approval and production credentials.
• Use a controlled canary, monitor payment and webhook health, then expand traffic.