Webhook URLs or signing secrets change without review — data exfiltration and interception risk.
Domain status
Early access- Shipped today
- Merchant Refund GuardShipped
- In design
- Payout Destination GuardIn design
- Settlement Exception GuardIn design
- API Key & Webhook GuardIn design
Merchant refund guard is our canonical payments guard; additional payment-ops guards available under engagement.
Guard readout
- Status
- In design
- Control steps
- 04
- 01Endpoint or secret mutation proposed
- 02Policy and risk evaluate integration security rules
- 03Security review escalates for credential changes
- 04Execute or block — evidence preserved
Risk advises. Policy decides. Evidence proves.
Endpoint URL or signing secret change.
Evidence bundle with mutation action, policy, and security approval when escalated.
Block unauthorized integration tampering before it takes effect.
