@agent-cards/checkout 0.12.0 → 0.14.0

package/dist/preflight-catalog.json

@@ -1,15 +1,20 @@
 {
   "schema_version": 1,
-  "catalog_version": "2026-09-14.1",
+  "catalog_version": "2026-09-15.1",
   "scope": "preflight_hint",
   "integration_version_note": "bundled describes the capabilities accompanying this helper, not a claim about another installed SDK version.",
   "limits": {
     "frames": 64,
     "signals": 2048,
     "snapshot_bytes": 262144,
-    "url_length": 4096
+    "url_length": 4096,
+    "raw_url_length": 65536
   },
   "known_psps": [
+    {
+      "psp": "spreedly",
+      "detection": "reviewed_rules"
+    },
     {
       "psp": "shopify",
       "detection": "reviewed_rules"
@@ -401,16 +406,26 @@
         "document"
       ],
       "origin": "https://checkoutshopper-live.adyen.com",
-      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/5\\.5\\.1/securedFields\\.html$",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
       "sources": [
         {
           "kind": "primary_source",
           "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
           "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
         }
       ],
       "hostname_pattern": "^checkoutshopper\\-live\\.adyen\\.com$",
-      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/5\\.5\\.1\\/securedFields\\.html$"
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
     },
     {
       "id": "adyen-web-legacy-test",
@@ -439,16 +454,21 @@
         "document"
       ],
       "origin": "https://checkoutshopper-test.adyen.com",
-      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/5\\.5\\.1/securedFields\\.html$",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
       "sources": [
         {
           "kind": "primary_source",
           "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
           "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
         }
       ],
       "hostname_pattern": "^checkoutshopper\\-test\\.adyen\\.com$",
-      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/5\\.5\\.1\\/securedFields\\.html$"
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
     },
     {
       "id": "stripe-js-named",
@@ -1508,6 +1528,44 @@
       "hostname_pattern": "^hosted\\.test\\.paysafe\\.com$",
       "pathname_pattern": "^\\/js\\/v1\\/latest\\/index\\.html$"
     },
+    {
+      "id": "spreedly-iframe-v1-script",
+      "psp": "spreedly",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://core.spreedly.com",
+      "path_pattern": "^/iframe/iframe-v1\\.min\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://core.spreedly.com/iframe/iframe-v1.min.js",
+          "reviewed_on": "2026-09-16"
+        }
+      ],
+      "hostname_pattern": "^core\\.spreedly\\.com$",
+      "pathname_pattern": "^\\/iframe\\/iframe-v1\\.min\\.js$"
+    },
+    {
+      "id": "spreedly-native-card-frame",
+      "psp": "spreedly",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://core.spreedly.com",
+      "path_pattern": "^/v1/embedded/(?:number|cvv)-frame-1\\.[0-9]{1,4}\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://core.spreedly.com/iframe/iframe-v1.min.js",
+          "reviewed_on": "2026-09-16"
+        }
+      ],
+      "hostname_pattern": "^core\\.spreedly\\.com$",
+      "pathname_pattern": "^\\/v1\\/embedded\\/(?:number|cvv)-frame-1\\.[0-9]{1,4}\\.html$"
+    },
     {
       "id": "recurly-js-v4",
       "psp": "recurly",
@@ -1811,6 +1869,234 @@
       "hostname_pattern": "^js\\.globalpay\\.com$",
       "pathname_pattern": "^\\/v1\\/globalpayments\\.js$"
     },
+    {
+      "id": "tranzila-terminal-hosted-page",
+      "psp": "tranzila",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://direct.tranzila.com",
+      "path_pattern": "/:terminal/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/payments-and-billing/hosted-payment-page",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:tranzila-terminal-root-hosted-page",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Tranzila hosted form covers direct.tranzila.com/:terminal/iframenew.php; a terminal-root hosted payment page is not admitted.",
+      "hostname_pattern": "^direct\\.tranzila\\.com$",
+      "pathname_pattern": "^\\/(?!process(?:\\/|$)|done(?:\\/|$))[A-Za-z0-9_-]+\\/?$"
+    },
+    {
+      "id": "square-card-element-frame",
+      "psp": "square",
+      "kinds": [
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://web.squarecdn.com",
+      "path_pattern": "/:version/single-card-element-iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.squareup.com/docs/web-payments/take-card-payment",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:square-single-card-element-iframe-1.84.5",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/single-card-element-iframe\\.html$"
+    },
+    {
+      "id": "authorize-net-sim-hosted-form",
+      "psp": "authorize_net",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://secure.authorize.net",
+      "path_pattern": "/gateway/transact.dll",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.authorize.net/api/upgrade_guide.html",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:authorize-net-hosted-transact-form",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Authorize.Net adapter covers Accept.js card requests; the hosted SIM payment form at secure.authorize.net/gateway/transact.dll posts the card as a top-level form and is not admitted.",
+      "hostname_pattern": "^secure\\.authorize\\.net$",
+      "pathname_pattern": "^\\/gateway\\/transact\\.dll$"
+    },
+    {
+      "id": "worldpay-hosted-payment-page",
+      "psp": "worldpay",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://secure.worldpay.com",
+      "path_pattern": "/wcc/{purchase,card}",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.worldpay.com/access/products/checkout/web",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:worldpay-hosted-payment-page-card",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Worldpay adapter covers Access Checkout card sessions; Worldpay hosted payment pages under secure.worldpay.com/wcc post the card to Worldpay directly and are not admitted.",
+      "hostname_pattern": "^secure\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/wcc\\/(?:purchase|card)$"
+    },
+    {
+      "id": "rapyd-hosted-checkout-page",
+      "psp": "rapyd",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://checkout.rapyd.net",
+      "path_pattern": "/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.rapyd.net/en/hosted-checkout-page.html",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:rapyd-hosted-checkout-page",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkout\\.rapyd\\.net$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "dlocal-smart-fields-parent",
+      "psp": "dlocal",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://static.dlocal.com",
+      "path_pattern": "/modules/fields/:version/{parent,iframe}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.dlocal.com/docs/set-up-smart-fields",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:dlocal-smart-fields-6.8.3",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^static\\.dlocal\\.com$",
+      "pathname_pattern": "^\\/modules\\/fields\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/(?:parent|iframe)\\.js$"
+    },
+    {
+      "id": "dlocal-smart-card-fields",
+      "psp": "dlocal",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://static.dlocal.com",
+      "path_pattern": "/modules/fields/:version/inner-{pan,card}.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.dlocal.com/docs/set-up-smart-fields",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:dlocal-smart-fields-6.8.3",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^static\\.dlocal\\.com$",
+      "pathname_pattern": "^\\/modules\\/fields\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/inner-(?:pan|card)\\.html$"
+    },
+    {
+      "id": "mercado-pago-secure-fields-frame",
+      "psp": "mercado_pago",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://secure-fields.mercadopago.com",
+      "path_pattern": "/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://sdk.mercadopago.com/js/v2",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:mercado-pago-secure-fields-frames",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^secure-fields\\.mercadopago\\.com$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "mercado-pago-checkout-pro-card-form",
+      "psp": "mercado_pago",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://www.mercadopago.com.ar",
+      "path_pattern": "/checkout/v1/payment/redirect/:preference/card-form/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://www.mercadopago.com.ar/developers/es/docs/checkout-pro/landing",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:mercado-pago-checkout-pro-guest-card-form",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^www\\.mercadopago\\.com\\.ar$",
+      "pathname_pattern": "^\\/checkout\\/v1\\/payment\\/redirect\\/[^/]+\\/card-form\\/?$"
+    },
     {
       "id": "square-web-sdk-sandbox",
       "psp": "square",
@@ -1888,9 +2174,386 @@
           "reviewed_on": "2026-09-11"
         }
       ]
+    },
+    {
+      "id": "tranzila-terminal-hosted-page-directng",
+      "psp": "tranzila",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://directng.tranzila.com",
+      "path_pattern": "/:terminal/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/payments-and-billing/hosted-payment-page",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:tranzila-terminal-root-hosted-page",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Tranzila hosted form covers direct.tranzila.com/:terminal/iframenew.php; a terminal-root hosted payment page is not admitted.",
+      "hostname_pattern": "^directng\\.tranzila\\.com$",
+      "pathname_pattern": "^\\/(?!process(?:\\/|$)|done(?:\\/|$))[A-Za-z0-9_-]+\\/?$"
+    },
+    {
+      "id": "square-card-element-frame-sandbox",
+      "psp": "square",
+      "kinds": [
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://sandbox.web.squarecdn.com",
+      "path_pattern": "/:version/single-card-element-iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.squareup.com/docs/web-payments/take-card-payment",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:square-single-card-element-iframe-1.84.5",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^sandbox\\.web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/single-card-element-iframe\\.html$"
+    },
+    {
+      "id": "authorize-net-sim-hosted-form-secure2",
+      "psp": "authorize_net",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://secure2.authorize.net",
+      "path_pattern": "/gateway/transact.dll",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.authorize.net/api/upgrade_guide.html",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:authorize-net-hosted-transact-form",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Authorize.Net adapter covers Accept.js card requests; the hosted SIM payment form at secure.authorize.net/gateway/transact.dll posts the card as a top-level form and is not admitted.",
+      "hostname_pattern": "^secure2\\.authorize\\.net$",
+      "pathname_pattern": "^\\/gateway\\/transact\\.dll$"
+    },
+    {
+      "id": "worldpay-hosted-payment-page-test",
+      "psp": "worldpay",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://secure-test.worldpay.com",
+      "path_pattern": "/wcc/{purchase,card}",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.worldpay.com/access/products/checkout/web",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:worldpay-hosted-payment-page-card",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Worldpay adapter covers Access Checkout card sessions; Worldpay hosted payment pages under secure.worldpay.com/wcc post the card to Worldpay directly and are not admitted.",
+      "hostname_pattern": "^secure-test\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/wcc\\/(?:purchase|card)$"
+    },
+    {
+      "id": "rapyd-hosted-checkout-page-sandbox",
+      "psp": "rapyd",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://sandboxcheckout.rapyd.net",
+      "path_pattern": "/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.rapyd.net/en/hosted-checkout-page.html",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:rapyd-hosted-checkout-page",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^sandboxcheckout\\.rapyd\\.net$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "adyen-secured-fields-live-us",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-us.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-us\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-au",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-au.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-au\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-apse",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-apse.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-apse\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-in",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-in.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-in\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-nea",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-nea.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-nea\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
     }
   ],
   "processors": [
+    {
+      "psp": "spreedly",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "spreedly.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "spreedly",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter handles the Spreedly iframe v1 restricted endpoint for new credit cards through the encrypted relay.",
+        "The merchant environment and optional signed iframe session must remain valid. Expired signatures require a fresh merchant checkout.",
+        "Spreedly creates a payment-method token; the merchant still completes any gateway payment and authentication."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "general_javascript_api",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The general payment_methods.json endpoint is outside the reviewed native iframe path."
+        },
+        {
+          "variant": "saved_card_or_recache",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Stored tokens and CVV-only recache requests are outside new-card tokenization."
+        },
+        {
+          "variant": "click_to_pay_or_bank_account",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Click to Pay and bank-account request shapes require separate validation."
+        },
+        {
+          "variant": "gateway_purchase_or_distribution",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Gateway transactions and payment-method distribution are outside the card tokenization adapter."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js",
+        "src/spreedly.js",
+        "../checkout/src/prepared-processor.ts"
+      ]
+    },
     {
       "psp": "shopify",
       "status": "supported",
@@ -3741,12 +4404,18 @@
   "direct_sdk_profile": {
     "schema_version": 1,
     "profile_version": "preflight-2",
-    "catalog_version": "2026-09-14.1",
+    "catalog_version": "2026-09-15.1",
     "integration": {
       "id": "direct_sdk",
       "version": "bundled"
     },
     "processor_entries": [
+      {
+        "psp": "spreedly",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
       {
         "psp": "shopify",
         "mode": "token",
@@ -3900,7 +4569,7 @@
   "kernel_profile_template": {
     "schema_version": 1,
     "profile_version": "kernel-template-1",
-    "catalog_version": "2026-09-14.1",
+    "catalog_version": "2026-09-15.1",
     "integration": {
       "id": "kernel_native",
       "version": "REPLACE-WITH-ADAPTER-VERSION"
@@ -3917,6 +4586,7 @@
     "navigation_changed",
     "invalid_observation",
     "invalid_url",
+    "card_entry_unrecognized",
     "collection_incomplete"
   ]
 }