Best Practices
Production integration checklist.
- Use decimal strings for money.
- Persist idempotency keys and event IDs with unique constraints.
- Keep clocks synchronized for webhook freshness checks.
- Treat customer payments and service-balance top-ups as different flows.
- Keep Mainnet and Shasta deployments isolated.
- Do not log API keys, webhook secrets, refresh cookies, or raw authorization headers.