Backend Payment Modules module
Holds payment adapter seams; Stripe remains fail-closed until reviewed live configuration.
Payment adapter contract
Payment interfaces keep provider-specific API operations separate from order state. The unconfigured gateway fails explicitly. Stripe adapters and webhook-verifier source exist but require reviewed account provisioning and actual provider test evidence. Do not present classes as proof of a live PaymentSheet.
Transaction correctness
The server must own prices and merchant selection, verify signed webhooks and reconcile duplicates and uncertain outcomes. No customer-supplied price or browser confirmation can settle an order. Changes here require provider sandbox tests, idempotency checks, secure secret handling and explicit cross-venue account review.
Deferred provider decisions
The owner still needs to approve cross-venue merchant account topology, saved-card reuse, refund responsibility and customer-facing payment recovery. The source's unconfigured gateway is the correct safe default until those decisions and sandbox tests are complete. A provider class is not commercial clearance or a production credential.
Source files in this module
- backend/payment-modules/stripe/OfficialStripePaymentGateway.php
- backend/payment-modules/stripe/OfficialStripeWebhookVerifier.php
- backend/payment-modules/stripe/StripePaymentGateway.php
- backend/payment-modules/stripe/UnconfiguredStripePaymentGateway.php
Maintenance and evidence
Check all affected file references and the matching human-readable user/architecture page when source changes. Run the module’s contract or governance checks; staging, payment and native hardware tests remain independent of source inventory coverage.