@agent-cards/checkout 0.8.0 → 0.9.1

package/dist/preflight-catalog.json

@@ -0,0 +1,3892 @@
+{
+  "schema_version": 1,
+  "catalog_version": "2026-09-11.2",
+  "scope": "preflight_hint",
+  "integration_version_note": "bundled describes the capabilities accompanying this helper, not a claim about another installed SDK version.",
+  "limits": {
+    "frames": 64,
+    "signals": 2048,
+    "snapshot_bytes": 262144,
+    "url_length": 4096
+  },
+  "known_psps": [
+    {
+      "psp": "shopify",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "stripe",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "braintree",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "checkout_com",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "adyen",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "tranzila",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "square",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "authorize_net",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "worldpay",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "nuvei",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "airwallex",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "rapyd",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "dlocal",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "ebanx",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "mercado_pago",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "payu",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "razorpay",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "mollie",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "paysafe",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "recurly",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "moneris",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "bambora",
+      "detection": "reviewed_rules"
+    },
+    {
+      "psp": "global_payments",
+      "detection": "reviewed_rules"
+    }
+  ],
+  "rules": [
+    {
+      "id": "stripe-js-v3",
+      "psp": "stripe",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://js.stripe.com",
+      "path_pattern": "/v3/*",
+      "hostname_pattern": "^js\\.stripe\\.com$",
+      "pathname_pattern": "^\\/v3(?:\\/|$)",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.stripe.com/js/including",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "square-web-sdk",
+      "psp": "square",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://web.squarecdn.com",
+      "path_pattern": "/v1/square.js",
+      "hostname_pattern": "^web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/v1\\/square\\.js$",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.squareup.com/docs/web-payments/quickstart/add-sdk-to-web-client",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "mollie-components-script",
+      "psp": "mollie",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.mollie.com",
+      "path_pattern": "/v2/mollie.js",
+      "hostname_pattern": "^js\\.mollie\\.com$",
+      "pathname_pattern": "^\\/v2\\/mollie\\.js$",
+      "sources": [
+        {
+          "kind": "saved_observation",
+          "reference": "mollie-haak-2026-09-11:hosted-credit-card-document-and-v2-script",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "mollie-components-v1-script",
+      "psp": "mollie",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.mollie.com",
+      "path_pattern": "/v1/mollie.js",
+      "hostname_pattern": "^js\\.mollie\\.com$",
+      "pathname_pattern": "^\\/v1\\/mollie\\.js$",
+      "sources": [
+        {
+          "kind": "saved_observation",
+          "reference": "mollie-haak-2026-09-11:hosted-credit-card-document-and-v2-script",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "mollie-hosted-credit-card",
+      "psp": "mollie",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://www.mollie.com",
+      "path_pattern": "/checkout/credit-card/session/:session",
+      "flow": "mollie.hosted_components",
+      "hostname_pattern": "^www\\.mollie\\.com$",
+      "pathname_pattern": "^\\/checkout\\/credit-card\\/session\\/[A-Za-z0-9_-]+\\/?$",
+      "sources": [
+        {
+          "kind": "saved_observation",
+          "reference": "mollie-haak-2026-09-11:hosted-credit-card-document-and-v2-script",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "braintree-web-sdk",
+      "psp": "braintree",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.braintreegateway.com",
+      "path_pattern": "/web/:version/js/*",
+      "hostname_pattern": "^js\\.braintreegateway\\.com$",
+      "pathname_pattern": "^\\/web\\/[^/]+\\/js\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.paypal.com/braintree/docs/start/hello-client/javascript/v3/",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "braintree-hosted-fields",
+      "psp": "braintree",
+      "kinds": [
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://assets.braintreegateway.com",
+      "path_pattern": "/web/*",
+      "hostname_pattern": "^assets\\.braintreegateway\\.com$",
+      "pathname_pattern": "^\\/web\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.paypal.com/braintree/docs/start/hello-client/javascript/v3/",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "paysafe-js",
+      "psp": "paysafe",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://hosted.paysafe.com",
+      "path_pattern": "/{js,checkout}/*",
+      "hostname_pattern": "^hosted\\.paysafe\\.com$",
+      "pathname_pattern": "^\\/(?:js|checkout)\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.paysafe.com/en/api-docs/paysafe-js/overview/",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "worldpay-checkout-sdk",
+      "psp": "worldpay",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://access.worldpay.com",
+      "path_pattern": "/access-checkout/*",
+      "hostname_pattern": "^access\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/access-checkout\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.worldpay.com/products/checkout/web",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "authorize-net-accept",
+      "psp": "authorize_net",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.authorize.net",
+      "path_pattern": "/v{1,3}/Accept{UI}.js",
+      "hostname_pattern": "^js\\.authorize\\.net$",
+      "pathname_pattern": "^\\/v[13]\\/Accept(?:UI)?\\.js$",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "razorpay-checkout-script",
+      "psp": "razorpay",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkout.razorpay.com",
+      "path_pattern": "/v1/checkout.js",
+      "hostname_pattern": "^checkout\\.razorpay\\.com$",
+      "pathname_pattern": "^\\/v1\\/checkout\\.js$",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://razorpay.com/docs/payments/payment-gateway/web-integration/standard/integration-steps/",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "vgs-collect-script",
+      "psp": "vgs",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.verygoodvault.com",
+      "path_pattern": "/vgs-collect/*",
+      "hostname_pattern": "^js\\.verygoodvault\\.com$",
+      "pathname_pattern": "^\\/vgs-collect\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.verygoodsecurity.com/vault/developer-tools/vgs-collect/js/integration",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "vgs-collect-frame",
+      "psp": "vgs",
+      "kinds": [
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://:tenant.:environment.verygoodproxy.com",
+      "path_pattern": "/*",
+      "hostname_pattern": "^[a-z0-9-]+\\.(?:live|sandbox)\\.verygoodproxy\\.com$",
+      "pathname_pattern": "^\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.verygoodsecurity.com/vault/developer-tools/vgs-collect/js/integration",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "checkout-frames-v2-script",
+      "psp": "checkout_com",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://cdn.checkout.com",
+      "path_pattern": "^/js/framesv2\\.min\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutdocs.readme.io/docs/frames-reference",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.checkout.com/js/framesv2.min.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^cdn\\.checkout\\.com$",
+      "pathname_pattern": "^\\/js\\/framesv2\\.min\\.js$"
+    },
+    {
+      "id": "adyen-web-legacy-live",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-live.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/web-best-practices/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-live\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "adyen-secured-fields-live",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/5\\.5\\.1/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-live\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/5\\.5\\.1\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-web-legacy-test",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-test.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/web-best-practices/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-test\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "adyen-secured-fields-test",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-test.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/5\\.5\\.1/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-test\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/5\\.5\\.1\\/securedFields\\.html$"
+    },
+    {
+      "id": "stripe-js-named",
+      "psp": "stripe",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.stripe.com",
+      "path_pattern": "^/(?:acacia|basil|clover|dahlia)/stripe\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.stripe.com/sdks/stripejs-versioning",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.stripe.com/sdks/stripejs-versioning?locale=en-GB",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.stripe.com/checkout/elements-with-checkout-sessions-api/changelog?locale=en-GB",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.stripe\\.com$",
+      "pathname_pattern": "^\\/(?:acacia|basil|clover|dahlia)\\/stripe\\.js$"
+    },
+    {
+      "id": "shopify-card-fields-script",
+      "psp": "shopify",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkout.pci.shopifyinc.com",
+      "path_pattern": "^/build/[a-f0-9]+/card_fields\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkout.pci.shopifyinc.com/build/04ed4e1/card_fields.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkout\\.pci\\.shopifyinc\\.com$",
+      "pathname_pattern": "^\\/build\\/[a-f0-9]+\\/card_fields\\.js$"
+    },
+    {
+      "id": "shopify-card-number-frame",
+      "psp": "shopify",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkout.pci.shopifyinc.com",
+      "path_pattern": "^/build/[a-f0-9]+/number-(?:ltr|rtl)\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkout.pci.shopifyinc.com/build/04ed4e1/card_fields.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkout\\.pci\\.shopifyinc\\.com$",
+      "pathname_pattern": "^\\/build\\/[a-f0-9]+\\/number-(?:ltr|rtl)\\.html$"
+    },
+    {
+      "id": "shopify-card-fields-legacy-script",
+      "psp": "shopify",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkout.shopifycs.com",
+      "path_pattern": "^/dist/card_fields\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkout.shopifycs.com/dist/card_fields.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkout\\.shopifycs\\.com$",
+      "pathname_pattern": "^\\/dist\\/card_fields\\.js$"
+    },
+    {
+      "id": "stripe-js-script",
+      "psp": "stripe",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.stripe.com",
+      "path_pattern": "^/v3/?$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.stripe.com/js/including",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.stripe\\.com$",
+      "pathname_pattern": "^\\/v3\\/?$"
+    },
+    {
+      "id": "braintree-dropin-script",
+      "psp": "braintree",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.braintreegateway.com",
+      "path_pattern": "^/web/dropin/[0-9]+\\.[0-9]+\\.[0-9]+/js/dropin(?:\\.min)?\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.paypal.com/braintree/docs/start/hello-client/javascript/v3/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.braintreegateway\\.com$",
+      "pathname_pattern": "^\\/web\\/dropin\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/js\\/dropin(?:\\.min)?\\.js$"
+    },
+    {
+      "id": "checkout-flow-script",
+      "psp": "checkout_com",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkout-web-components.checkout.com",
+      "path_pattern": "^/index\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://www.checkout.com/docs/get-started",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://checkout-web-components.checkout.com/index.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkout\\-web\\-components\\.checkout\\.com$",
+      "pathname_pattern": "^\\/index\\.js$"
+    },
+    {
+      "id": "checkout-flow-frame",
+      "psp": "checkout_com",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkout-web-components.checkout.com",
+      "path_pattern": "^/pages/[0-9]+\\.[0-9]+\\.[0-9]+/index\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkout-web-components.checkout.com/index.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkout\\-web\\-components\\.checkout\\.com$",
+      "pathname_pattern": "^\\/pages\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/index\\.html$"
+    },
+    {
+      "id": "adyen-web-script",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-live.cdn.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/standard/integration/drop-in/best-practices",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/build-your-integration/sessions-flow/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-live\\.cdn\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "adyen-web-script-host-2",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-test.cdn.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/standard/integration/drop-in/best-practices",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/build-your-integration/sessions-flow/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-test\\.cdn\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "adyen-web-script-host-3",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-live-us.cdn.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/standard/integration/drop-in/best-practices",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/build-your-integration/sessions-flow/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-live\\-us\\.cdn\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "adyen-web-script-host-4",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-live-au.cdn.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/standard/integration/drop-in/best-practices",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/build-your-integration/sessions-flow/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-live\\-au\\.cdn\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "adyen-web-script-host-5",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-live-nea.cdn.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/standard/integration/drop-in/best-practices",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/build-your-integration/sessions-flow/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-live\\-nea\\.cdn\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "adyen-web-script-host-6",
+      "psp": "adyen",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkoutshopper-live-in.cdn.adyen.com",
+      "path_pattern": "^/checkoutshopper/sdk/[0-9]+\\.[0-9]+\\.[0-9]+/adyen\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/standard/integration/drop-in/best-practices",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/online-payments/build-your-integration/sessions-flow/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper\\-live\\-in\\.cdn\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/adyen\\.js$"
+    },
+    {
+      "id": "tranzila-hosted-page",
+      "psp": "tranzila",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document",
+        "form"
+      ],
+      "origin": "https://direct.tranzila.com",
+      "path_pattern": "^/[A-Za-z0-9_-]+/iframenew\\.php$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/payments-and-billing/iframe-integration",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/payments-and-billing/iframe-integration-directng",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/emv-pinpad/emv-iframe-integration",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^direct\\.tranzila\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9_-]+\\/iframenew\\.php$"
+    },
+    {
+      "id": "tranzila-hosted-page-host-2",
+      "psp": "tranzila",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document",
+        "form"
+      ],
+      "origin": "https://directng.tranzila.com",
+      "path_pattern": "^/[A-Za-z0-9_-]+/iframenew\\.php$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/payments-and-billing/iframe-integration",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/payments-and-billing/iframe-integration-directng",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/emv-pinpad/emv-iframe-integration",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^directng\\.tranzila\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9_-]+\\/iframenew\\.php$"
+    },
+    {
+      "id": "square-web-script",
+      "psp": "square",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://web.squarecdn.com",
+      "path_pattern": "^/v1/square\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.squareup.com/docs/web-payments/quickstart/add-sdk-to-web-client",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/v1\\/square\\.js$"
+    },
+    {
+      "id": "square-web-script-host-2",
+      "psp": "square",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://sandbox.web.squarecdn.com",
+      "path_pattern": "^/v1/square\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.squareup.com/docs/web-payments/quickstart/add-sdk-to-web-client",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^sandbox\\.web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/v1\\/square\\.js$"
+    },
+    {
+      "id": "authorize-net-accept-script",
+      "psp": "authorize_net",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.authorize.net",
+      "path_pattern": "^/v1/Accept\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.authorize\\.net$",
+      "pathname_pattern": "^\\/v1\\/Accept\\.js$"
+    },
+    {
+      "id": "authorize-net-accept-script-host-2",
+      "psp": "authorize_net",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://jstest.authorize.net",
+      "path_pattern": "^/v1/Accept\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^jstest\\.authorize\\.net$",
+      "pathname_pattern": "^\\/v1\\/Accept\\.js$"
+    },
+    {
+      "id": "authorize-net-acceptui-script",
+      "psp": "authorize_net",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.authorize.net",
+      "path_pattern": "^/v3/AcceptUI\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.authorize\\.net$",
+      "pathname_pattern": "^\\/v3\\/AcceptUI\\.js$"
+    },
+    {
+      "id": "authorize-net-acceptui-script-host-2",
+      "psp": "authorize_net",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://jstest.authorize.net",
+      "path_pattern": "^/v3/AcceptUI\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^jstest\\.authorize\\.net$",
+      "pathname_pattern": "^\\/v3\\/AcceptUI\\.js$"
+    },
+    {
+      "id": "worldpay-checkout-script",
+      "psp": "worldpay",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://access.worldpay.com",
+      "path_pattern": "^/access-checkout/v2/checkout\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.worldpay.com/access/products/checkout/web",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^access\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/access-checkout\\/v2\\/checkout\\.js$"
+    },
+    {
+      "id": "worldpay-checkout-script-host-2",
+      "psp": "worldpay",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://try.access.worldpay.com",
+      "path_pattern": "^/access-checkout/v2/checkout\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.worldpay.com/access/products/checkout/web",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^try\\.access\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/access-checkout\\/v2\\/checkout\\.js$"
+    },
+    {
+      "id": "nuvei-websdk-script",
+      "psp": "nuvei",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://cdn.safecharge.com",
+      "path_pattern": "^/safecharge_resources/v1/websdk/safecharge\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.nuvei.com/documentation/accept-payment/web-sdk/quick-start-for-web-sdk/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.safecharge.com/safecharge_resources/v1/websdk/safecharge.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^cdn\\.safecharge\\.com$",
+      "pathname_pattern": "^\\/safecharge_resources\\/v1\\/websdk\\/safecharge\\.js$"
+    },
+    {
+      "id": "nuvei-card-fields-frame",
+      "psp": "nuvei",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://cdn.safecharge.com",
+      "path_pattern": "^/safecharge_resources/v1/websdk/sfc_inner_card\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.nuvei.com/documentation/accept-payment/web-sdk/nuvei-fields/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.safecharge.com/safecharge_resources/v1/websdk/sfc_inner_card.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^cdn\\.safecharge\\.com$",
+      "pathname_pattern": "^\\/safecharge_resources\\/v1\\/websdk\\/sfc_inner_card\\.html$"
+    },
+    {
+      "id": "airwallex-components-script",
+      "psp": "airwallex",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://static.airwallex.com",
+      "path_pattern": "^/components/sdk/v1/index\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://www.airwallex.com/docs/payments/get-started/quickstart",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://www.airwallex.com/docs/payments/test-and-go-live/upgrade-to-airwallex.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://www.airwallex.com/docs/payouts/test-and-go-live/upgrade-to-airwallex.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^static\\.airwallex\\.com$",
+      "pathname_pattern": "^\\/components\\/sdk\\/v1\\/index\\.js$"
+    },
+    {
+      "id": "airwallex-elements-legacy-script",
+      "psp": "airwallex",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkout.airwallex.com",
+      "path_pattern": "^/assets/elements\\.bundle\\.min\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://www.airwallex.com/docs/payments/test-and-go-live/upgrade-to-airwallex.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkout\\.airwallex\\.com$",
+      "pathname_pattern": "^\\/assets\\/elements\\.bundle\\.min\\.js$"
+    },
+    {
+      "id": "rapyd-checkout-toolkit-script",
+      "psp": "rapyd",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkouttoolkit.rapyd.net",
+      "path_pattern": "^/$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.rapyd.net/en/checkout-toolkit-integration.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkouttoolkit\\.rapyd\\.net$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "rapyd-checkout-toolkit-script-host-2",
+      "psp": "rapyd",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://sandboxcheckouttoolkit.rapyd.net",
+      "path_pattern": "^/$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.rapyd.net/en/checkout-toolkit-integration.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^sandboxcheckouttoolkit\\.rapyd\\.net$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "dlocal-smart-fields-script",
+      "psp": "dlocal",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.dlocal.com",
+      "path_pattern": "^/$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.dlocal.com/docs/set-up-smart-fields",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.dlocal.com/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://static.dlocal.com/modules/fields/6.18.2/iframe.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.dlocal\\.com$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "dlocal-smart-fields-sandbox-script",
+      "psp": "dlocal",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js-sandbox.dlocal.com",
+      "path_pattern": "^/$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.dlocal.com/docs/set-up-smart-fields",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.dlocal.com/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://static.dlocal.com/modules/fields/6.18.2/iframe.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\-sandbox\\.dlocal\\.com$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "dlocal-smart-fields-parent-6-18-2",
+      "psp": "dlocal",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://static.dlocal.com",
+      "path_pattern": "^/modules/fields/6\\.18\\.2/parent\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.dlocal.com/docs/set-up-smart-fields",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.dlocal.com/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://static.dlocal.com/modules/fields/6.18.2/iframe.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^static\\.dlocal\\.com$",
+      "pathname_pattern": "^\\/modules\\/fields\\/6\\.18\\.2\\/parent\\.js$"
+    },
+    {
+      "id": "dlocal-smart-card-fields-6-18-2",
+      "psp": "dlocal",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://static.dlocal.com",
+      "path_pattern": "^/modules/fields/6\\.18\\.2/inner-(?:pan|card)\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.dlocal.com/docs/set-up-smart-fields",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.dlocal.com/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://static.dlocal.com/modules/fields/6.18.2/iframe.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^static\\.dlocal\\.com$",
+      "pathname_pattern": "^\\/modules\\/fields\\/6\\.18\\.2\\/inner-(?:pan|card)\\.html$"
+    },
+    {
+      "id": "ebanx-js-latest",
+      "psp": "ebanx",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://ebanx-js.ebanx.com",
+      "path_pattern": "^/latest/dist/ebanx\\.min\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.ebanx.com/docs/pay-in/features/cards/tokenization/tokenization-ebanx-js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://ebanx-js.ebanx.com/latest/dist/ebanx.min.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^ebanx\\-js\\.ebanx\\.com$",
+      "pathname_pattern": "^\\/latest\\/dist\\/ebanx\\.min\\.js$"
+    },
+    {
+      "id": "mercado-pago-sdk-v2",
+      "psp": "mercado_pago",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://sdk.mercadopago.com",
+      "path_pattern": "^/js/v2$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/mercadopago/sdk-js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://sdk.mercadopago.com/js/v2",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^sdk\\.mercadopago\\.com$",
+      "pathname_pattern": "^\\/js\\/v2$"
+    },
+    {
+      "id": "payu-gpo-sdk",
+      "psp": "payu",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://secure.payu.com",
+      "path_pattern": "^/javascript/sdk$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developers.payu.com/europe/docs/checkout/secure-elements/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://secure.payu.com/javascript/sdk",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^secure\\.payu\\.com$",
+      "pathname_pattern": "^\\/javascript\\/sdk$"
+    },
+    {
+      "id": "payu-gpo-sdk-sandbox",
+      "psp": "payu",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://secure.snd.payu.com",
+      "path_pattern": "^/javascript/sdk$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developers.payu.com/europe/docs/checkout/secure-elements/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://secure.payu.com/javascript/sdk",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^secure\\.snd\\.payu\\.com$",
+      "pathname_pattern": "^\\/javascript\\/sdk$"
+    },
+    {
+      "id": "payu-gpo-sdk-sandbox-host-2",
+      "psp": "payu",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://merch-prod.snd.payu.com",
+      "path_pattern": "^/javascript/sdk$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developers.payu.com/europe/docs/checkout/secure-elements/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://secure.payu.com/javascript/sdk",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^merch\\-prod\\.snd\\.payu\\.com$",
+      "pathname_pattern": "^\\/javascript\\/sdk$"
+    },
+    {
+      "id": "payu-gpo-secure-form",
+      "psp": "payu",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://secure.payu.com",
+      "path_pattern": "^/front/secure-form/form/$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developers.payu.com/europe/docs/checkout/secure-elements/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://secure.payu.com/javascript/sdk",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^secure\\.payu\\.com$",
+      "pathname_pattern": "^\\/front\\/secure-form\\/form\\/$"
+    },
+    {
+      "id": "razorpay-standard-checkout-v1",
+      "psp": "razorpay",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://checkout.razorpay.com",
+      "path_pattern": "^/v1/checkout\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://razorpay.com/docs/payments/payment-gateway/web-integration/standard/integration-steps/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://checkout.razorpay.com/v1/checkout.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^checkout\\.razorpay\\.com$",
+      "pathname_pattern": "^\\/v1\\/checkout\\.js$"
+    },
+    {
+      "id": "mollie-components-v1",
+      "psp": "mollie",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.mollie.com",
+      "path_pattern": "^/v1/mollie\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.mollie.com/docs/mollie-components",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.mollie.com/docs/custom-checkout-components",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.mollie.com/v2/mollie.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.mollie\\.com$",
+      "pathname_pattern": "^\\/v1\\/mollie\\.js$"
+    },
+    {
+      "id": "mollie-components-v2",
+      "psp": "mollie",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.mollie.com",
+      "path_pattern": "^/v2/mollie\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.mollie.com/docs/mollie-components",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.mollie.com/docs/custom-checkout-components",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.mollie.com/v2/mollie.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.mollie\\.com$",
+      "pathname_pattern": "^\\/v2\\/mollie\\.js$"
+    },
+    {
+      "id": "paysafe-js-v1-latest",
+      "psp": "paysafe",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://hosted.paysafe.com",
+      "path_pattern": "^/js/v1/latest/paysafe\\.min\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.paysafe.com/en/api-docs/paysafe-js/overview/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://hosted.paysafe.com/js/v1/latest/paysafe.min.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.paysafe.com/en/api-docs/3ds/using-the-sdk/including-the-3d-secure-2-sdk/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^hosted\\.paysafe\\.com$",
+      "pathname_pattern": "^\\/js\\/v1\\/latest\\/paysafe\\.min\\.js$"
+    },
+    {
+      "id": "paysafe-js-v1-fields",
+      "psp": "paysafe",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://hosted.paysafe.com",
+      "path_pattern": "^/js/v1/latest/index\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.paysafe.com/en/api-docs/paysafe-js/overview/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://hosted.paysafe.com/js/v1/latest/paysafe.min.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.paysafe.com/en/api-docs/3ds/using-the-sdk/including-the-3d-secure-2-sdk/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^hosted\\.paysafe\\.com$",
+      "pathname_pattern": "^\\/js\\/v1\\/latest\\/index\\.html$"
+    },
+    {
+      "id": "paysafe-js-v1-fields-host-2",
+      "psp": "paysafe",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://hosted.test.paysafe.com",
+      "path_pattern": "^/js/v1/latest/index\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.paysafe.com/en/api-docs/paysafe-js/overview/",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://hosted.paysafe.com/js/v1/latest/paysafe.min.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.paysafe.com/en/api-docs/3ds/using-the-sdk/including-the-3d-secure-2-sdk/",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^hosted\\.test\\.paysafe\\.com$",
+      "pathname_pattern": "^\\/js\\/v1\\/latest\\/index\\.html$"
+    },
+    {
+      "id": "recurly-js-v4",
+      "psp": "recurly",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.recurly.com",
+      "path_pattern": "^/v4/recurly\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://recurly.com/developers/reference/recurly-js/index.html",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/recurly/recurly-js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.recurly.com/v4/recurly.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.recurly\\.com$",
+      "pathname_pattern": "^\\/v4\\/recurly\\.js$"
+    },
+    {
+      "id": "recurly-hosted-field-v1",
+      "psp": "recurly",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://api.recurly.com",
+      "path_pattern": "^/js/v1/field\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://recurly.com/developers/reference/recurly-js/index.html",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/recurly/recurly-js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.recurly.com/v4/recurly.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^api\\.recurly\\.com$",
+      "pathname_pattern": "^\\/js\\/v1\\/field\\.html$"
+    },
+    {
+      "id": "recurly-hosted-field-v1-host-2",
+      "psp": "recurly",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://api.eu.recurly.com",
+      "path_pattern": "^/js/v1/field\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://recurly.com/developers/reference/recurly-js/index.html",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/recurly/recurly-js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.recurly.com/v4/recurly.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^api\\.eu\\.recurly\\.com$",
+      "pathname_pattern": "^\\/js\\/v1\\/field\\.html$"
+    },
+    {
+      "id": "moneris-hosted-tokenization",
+      "psp": "moneris",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://www3.moneris.com",
+      "path_pattern": "^/HPPtoken/index\\.php$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.moneris.com/hosted-solutions/docs/setup-guide-tokenization",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.moneris.com/moneris-api/docs/purchase-with-payment-token",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://www3.moneris.com/HPPtoken/hpp_common.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^www3\\.moneris\\.com$",
+      "pathname_pattern": "^\\/HPPtoken\\/index\\.php$"
+    },
+    {
+      "id": "moneris-hosted-tokenization-host-2",
+      "psp": "moneris",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://esqa.moneris.com",
+      "path_pattern": "^/HPPtoken/index\\.php$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.moneris.com/hosted-solutions/docs/setup-guide-tokenization",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.moneris.com/moneris-api/docs/purchase-with-payment-token",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://www3.moneris.com/HPPtoken/hpp_common.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^esqa\\.moneris\\.com$",
+      "pathname_pattern": "^\\/HPPtoken\\/index\\.php$"
+    },
+    {
+      "id": "moneris-new-io-hosted-tokenization",
+      "psp": "moneris",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://mpg1t.moneris.io",
+      "path_pattern": "^/HPPtoken/index\\.php$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.moneris.com/hosted-solutions/docs/setup-guide-tokenization",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.moneris.com/moneris-api/docs/purchase-with-payment-token",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://www3.moneris.com/HPPtoken/hpp_common.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "variant_unverified": "The current canonical Moneris recognizer contains moneris.com hosts only; moneris.io is not admitted.",
+      "hostname_pattern": "^mpg1t\\.moneris\\.io$",
+      "pathname_pattern": "^\\/HPPtoken\\/index\\.php$"
+    },
+    {
+      "id": "bambora-na-custom-checkout-1",
+      "psp": "bambora",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://libs.na.bambora.com",
+      "path_pattern": "^/customcheckout/1/customcheckout\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.na.worldline-solutions.com/build-your-integration/checkout-form/custom-checkout/reference",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://libs.na.bambora.com/customcheckout/1/customcheckout.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://libs.na.bambora.com/customcheckout/1.0.5-39/customcheckoutremote.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^libs\\.na\\.bambora\\.com$",
+      "pathname_pattern": "^\\/customcheckout\\/1\\/customcheckout\\.js$"
+    },
+    {
+      "id": "bambora-na-fields-1-0-5-39",
+      "psp": "bambora",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://libs.na.bambora.com",
+      "path_pattern": "^/customcheckout/1\\.0\\.5-39/iframe\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.na.worldline-solutions.com/build-your-integration/checkout-form/custom-checkout/reference",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://libs.na.bambora.com/customcheckout/1/customcheckout.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://libs.na.bambora.com/customcheckout/1.0.5-39/customcheckoutremote.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^libs\\.na\\.bambora\\.com$",
+      "pathname_pattern": "^\\/customcheckout\\/1\\.0\\.5-39\\/iframe\\.html$"
+    },
+    {
+      "id": "global-payments-js-4-1-3",
+      "psp": "global_payments",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.globalpay.com",
+      "path_pattern": "^/4\\.1\\.3/globalpayments\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.globalpayments.com/docs/integration-options/sdk/javascript",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/globalpayments/globalpayments-js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.globalpay.com/4.1.3/globalpayments.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.globalpay.com/v1/globalpayments.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.globalpay\\.com$",
+      "pathname_pattern": "^\\/4\\.1\\.3\\/globalpayments\\.js$"
+    },
+    {
+      "id": "global-payments-js-v1-alias",
+      "psp": "global_payments",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://js.globalpay.com",
+      "path_pattern": "^/v1/globalpayments\\.js$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.globalpayments.com/docs/integration-options/sdk/javascript",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/globalpayments/globalpayments-js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.globalpay.com/4.1.3/globalpayments.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://js.globalpay.com/v1/globalpayments.js",
+          "reviewed_on": "2026-09-11"
+        }
+      ],
+      "hostname_pattern": "^js\\.globalpay\\.com$",
+      "pathname_pattern": "^\\/v1\\/globalpayments\\.js$"
+    },
+    {
+      "id": "square-web-sdk-sandbox",
+      "psp": "square",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://sandbox.web.squarecdn.com",
+      "path_pattern": "/v1/square.js",
+      "hostname_pattern": "^sandbox\\.web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/v1\\/square\\.js$",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.squareup.com/docs/web-payments/quickstart/add-sdk-to-web-client",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "paysafe-js-test",
+      "psp": "paysafe",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://hosted.test.paysafe.com",
+      "path_pattern": "/{js,checkout}/*",
+      "hostname_pattern": "^hosted\\.test\\.paysafe\\.com$",
+      "pathname_pattern": "^\\/(?:js|checkout)\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.paysafe.com/en/api-docs/paysafe-js/overview/",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "worldpay-checkout-sdk-try",
+      "psp": "worldpay",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://try.access.worldpay.com",
+      "path_pattern": "/access-checkout/*",
+      "hostname_pattern": "^try\\.access\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/access-checkout\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.worldpay.com/products/checkout/web",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "authorize-net-accept-test",
+      "psp": "authorize_net",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://jstest.authorize.net",
+      "path_pattern": "/v{1,3}/Accept{UI}.js",
+      "hostname_pattern": "^jstest\\.authorize\\.net$",
+      "pathname_pattern": "^\\/v[13]\\/Accept(?:UI)?\\.js$",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    }
+  ],
+  "processors": [
+    {
+      "psp": "shopify",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "shopify.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "shopify",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The implemented card path handles Shopify checkout and deposit session requests; accelerated wallets and saved-card-only requests need separate coverage."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "stripe",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "stripe.tokenization",
+          "path_pattern": "^/v1/(?:payment_methods|tokens)$",
+          "effect": "token_or_method_creation",
+          "amount_binding": "none",
+          "psp": "stripe",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        },
+        {
+          "id": "stripe.payment_intent_confirm",
+          "path_pattern": "^/v1/payment_intents/pi_\\w+/confirm$",
+          "effect": "payment_confirmation",
+          "amount_binding": "processor_read_only",
+          "psp": "stripe",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        },
+        {
+          "id": "stripe.setup_intent_confirm",
+          "path_pattern": "^/v1/setup_intents/seti_\\w+/confirm$",
+          "effect": "save_card",
+          "amount_binding": "none",
+          "psp": "stripe",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Tokenization replays a token response; it does not authorize a later PaymentIntent confirm.",
+        "Direct PaymentIntent confirms require a card-bearing template; the intent’s amount is read from Stripe and a hint sent as amount with currency must agree with it.",
+        "Direct SetupIntent confirms require a card-bearing template and save a card without charging it; future charges are merchant-managed.",
+        "Automatic token-to-PaymentIntent or token-to-SetupIntent continuation is unsupported; tokenization does not bind a later intent."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "unbound_token_to_payment_intent",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "A token response does not bind a later PaymentIntent confirmation."
+        },
+        {
+          "variant": "unbound_token_to_setup_intent",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "A token response does not bind a later SetupIntent confirmation."
+        }
+      ],
+      "request_flows": [
+        {
+          "flow": "tokenization",
+          "coverage": "tokenization_response_only",
+          "amount_authority": "display_only"
+        },
+        {
+          "flow": "direct_payment_intent_confirm",
+          "coverage": "card_bearing_template_required",
+          "amount_authority": "requires_amount_and_currency_verification"
+        },
+        {
+          "flow": "direct_setup_intent_confirm",
+          "coverage": "card_bearing_template_required",
+          "amount_authority": "display_only",
+          "payment_effect": "save_card_without_charge",
+          "future_charges": "merchant_managed_outside_vault"
+        },
+        {
+          "flow": "token_to_payment_intent_confirm",
+          "coverage": "unsupported_unbound_intent"
+        },
+        {
+          "flow": "token_to_setup_intent_confirm",
+          "coverage": "unsupported_unbound_intent"
+        }
+      ],
+      "processor_amount": "stripe_payment_intent",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "braintree",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "braintree.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "braintree",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter handles a single reviewed GraphQL card-tokenization mutation. Configuration queries pass through without approval.",
+        "The prepared guest-card path requires its explicit tokenization options; a generic Braintree asset does not identify this request shape."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "graphql_batch_or_compound_mutation",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Batch envelopes, aliases and unrelated or compound GraphQL mutations are refused."
+        },
+        {
+          "variant": "legacy_non_graphql_tokenization",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The current Braintree recognizer covers the GraphQL card path."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js",
+        "src/braintree.ts",
+        "../checkout/src/cdp.ts",
+        "../checkout/src/prepared-processor.ts"
+      ]
+    },
+    {
+      "psp": "checkout_com",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "checkout_com.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "checkout_com",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers card-token requests from Checkout.com Frames and Flow. The Flow script alone does not identify the selected payment method."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "wallet_cvv_only_or_reusable_token_variant",
+          "status": "unverified",
+          "constraint": "direct_sdk",
+          "reason": "These variants require separate request and continuation validation."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "adyen",
+      "status": "supported",
+      "mode": "cse",
+      "operations": [
+        {
+          "id": "adyen.encrypted_card",
+          "effect": "encrypted_card_handoff",
+          "amount_binding": "unestablished",
+          "psp": "adyen",
+          "version": 1,
+          "mode": "cse",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "four_encrypted_card_fields"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "four_encrypted_card_fields",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "four_encrypted_card_fields",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Four encrypted card fields in the Adyen Sessions payments body are required.",
+        "Single-blob encryption, wallets, and stored-card variants are not covered."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "single_blob_encryption",
+          "status": "unsupported",
+          "constraint": "vault",
+          "reason": "The Vault requires the four encrypted card fields from the Adyen Sessions payments body."
+        },
+        {
+          "variant": "wallet_or_stored_card_variant",
+          "status": "unsupported",
+          "constraint": "vault",
+          "reason": "The supported encryption template requires a new card with four encrypted fields."
+        },
+        {
+          "variant": "non_sessions_payment_flow",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The current request recognizer is limited to the Sessions payments operation."
+        }
+      ],
+      "processor_amount": "request",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "tranzila",
+      "status": "supported",
+      "mode": "hosted_form",
+      "operations": [
+        {
+          "id": "tranzila.hosted_sale",
+          "effect": "hosted_sale_submission",
+          "amount_binding": "template_only",
+          "psp": "tranzila",
+          "version": 1,
+          "mode": "hosted_form",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "plain_sale_template",
+            "device_submission_and_merchant_reconciliation"
+          ]
+        },
+        "save_card": {
+          "status": "unsupported",
+          "reason": "hosted_form_plain_sale_only",
+          "requirements": []
+        },
+        "subscription_initial": {
+          "status": "unsupported",
+          "reason": "hosted_form_plain_sale_only",
+          "requirements": []
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Plain sale only; reusable credentials are refused.",
+        "The browser receives a submission notice, not the processor result.",
+        "A hosted form submission notice is not a confirmed payment; the merchant must confirm the result."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "reusable_credentials",
+          "status": "unsupported",
+          "constraint": "vault",
+          "reason": "The hosted form allows a plain sale and refuses reusable card tokens."
+        },
+        {
+          "variant": "verification_refund_or_forced_sale",
+          "status": "unsupported",
+          "constraint": "vault",
+          "reason": "Only the plain-sale transaction mode is accepted."
+        },
+        {
+          "variant": "foreign_merchant_callback",
+          "status": "unsupported",
+          "constraint": "vault",
+          "reason": "The form callbacks must belong to the approved merchant."
+        }
+      ],
+      "processor_amount": "request",
+      "challenge_surface": "cardholder_device",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "square",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "square.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "square",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The implemented card path uses Web Payments SDK card-nonce requests. Other Square payment methods do not establish card-request support."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "authorize_net",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "authorize_net.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "authorize_net",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The implemented path is Accept.js card tokenization. AcceptUI runs in a child frame and requires an integration that observes that frame.",
+        "Authorize.Net shares one endpoint across request types; the actual card-bearing body must still be checked."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "legacy_sim_or_dpm_form",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The retired SIM/DPM top-level form submission is outside the implemented Accept.js path."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "worldpay",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "worldpay.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "worldpay",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "Access Worldpay card-session requests require the endpoint-specific vendor Accept media type."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "cvc_only_session",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The implemented path covers full card sessions, not CVC-only requests for a stored token."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "nuvei",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "nuvei.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "nuvei",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers the reviewed SafeCharge Web SDK and hosted-field card-tokenization and card-payment request shapes. Other Nuvei products do not inherit that support."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "request",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "airwallex",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "airwallex.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "airwallex",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers card-bearing PaymentIntent confirmation, payment-consent verification and payment-method creation."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "header_borne_pan_bin_lookup",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The reference BIN lookup carries card data in a header and is outside the body substitution path."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "rapyd",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "rapyd.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "rapyd",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers the hosted collect-card and checkout card POST bodies. A hosted page URL alone does not identify the selected payment method."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "dlocal",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "dlocal.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "dlocal",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The implemented Smart Fields path creates a temporal token from a full new-card body."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "cvv_only_store",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "CVC-only storage does not use the implemented new-card tokenization path."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "ebanx",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "ebanx.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "ebanx",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers the reviewed EBANX and EBANX Pay browser card-token request and preserves its month/year expiry format."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "mercado_pago",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "mercado_pago.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "mercado_pago",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers new-card token creation. The same endpoint can receive saved-card data, so request-body validation remains necessary."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "saved_card_or_token_update",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Saved-card security-code requests and card-token PUT updates are outside the new-card path."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "payu",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "payu.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "payu",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The implemented PayU path is GPO Secure Forms card tokenization. Other regional PayU products require separate coverage."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "razorpay",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "razorpay.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "razorpay",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers the reviewed AJAX, redirect checkout and fee-bearer card-create forms, including the standard_checkout session variant.",
+        "Merchant currency, international-card settings and processor approval remain separate from implementation support."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "pg_router_or_page_selected_regional_api",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The reviewed request routes do not include the router variant or arbitrary regional API hosts."
+        }
+      ],
+      "processor_amount": "request",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "mollie",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "mollie.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "mollie",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter handles Mollie Components v1 and v2 new-card tokenization. Hosted checkout is one use of Components, not a separate limitation on processor support.",
+        "Authentication and merchant reconciliation still need to complete after tokenization."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "paysafe",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "paysafe.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "paysafe",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers Paysafe.js tokenization, the single-use payment-handle path and the reviewed Paysafe Checkout card-token body.",
+        "The documented payment-handle route and the observed tokenization route use different authentication headers."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "legacy_customer_vault_single_use_token",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The older customer-vault single-use-token route is not implemented."
+        },
+        {
+          "variant": "saved_payment_token_or_3ds_only_request",
+          "status": "unverified",
+          "constraint": "direct_sdk",
+          "reason": "Saved-token and 3DS-only routes need separate validation."
+        }
+      ],
+      "processor_amount": "request",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "recurly",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "recurly.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "recurly",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "legacy_jsonp_get",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The cors:false JSONP GET mode is outside the card POST interceptor."
+        },
+        {
+          "variant": "bank_account_or_apm_token",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Bank-account and alternative-payment token routes are outside the new-card path."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "moneris",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "moneris.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "moneris",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The implemented integration is Moneris Hosted Tokenization."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "moneris_checkout_chkt",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Moneris Checkout uses a different path from Hosted Tokenization and is not implemented."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "bambora",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "bambora.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "bambora",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers Bambora North America / Worldline Custom Checkout and its reviewed migration host. Other regional products do not inherit that support."
+      ],
+      "unsupported_variants": [],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    },
+    {
+      "psp": "global_payments",
+      "status": "supported",
+      "mode": "token",
+      "operations": [
+        {
+          "id": "global_payments.card_request",
+          "effect": "processor_specific_card_request",
+          "amount_binding": "unestablished",
+          "psp": "global_payments",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        }
+      ],
+      "scenarios": {
+        "one_time": {
+          "status": "supported",
+          "reason": "card_request_adapter_implemented",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation"
+          ]
+        },
+        "save_card": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_card_saved"
+          ]
+        },
+        "subscription_initial": {
+          "status": "conditional",
+          "reason": "merchant_card_storage_and_consent_required",
+          "requirements": [
+            "actual_payment_request_validation",
+            "merchant_confirmation",
+            "stored_card_consent",
+            "merchant_subscription_confirmation"
+          ]
+        },
+        "subscription_renewal": {
+          "status": "outside_vault",
+          "reason": "renewal_managed_by_merchant",
+          "requirements": [
+            "verify_merchant_billing"
+          ]
+        }
+      },
+      "limitations": [
+        "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
+        "The adapter covers the reviewed GlobalPayments.js Heartland/Portico and GP-API/UCP card-tokenization paths."
+      ],
+      "unsupported_variants": [
+        {
+          "variant": "ucp_account_scoped_tokenizer",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "The implemented UCP path supports the documented merchant scope, not an arbitrary account scope."
+        }
+      ],
+      "processor_amount": "none",
+      "challenge_surface": "merchant_browser",
+      "merchant_confirmation_required": true,
+      "live_validation": "not_established_by_catalog",
+      "sources": [
+        "src/definitions.js",
+        "src/operations.js",
+        "src/backend.js"
+      ]
+    }
+  ],
+  "exclusions": [
+    {
+      "psp": "vgs",
+      "reason": "iframe_bound_tokenization",
+      "action": "human_checkout"
+    },
+    {
+      "psp": "bluesnap",
+      "reason": "multi_request_tokenization_not_supported",
+      "action": "human_checkout"
+    },
+    {
+      "psp": "stripe",
+      "reason": "unbound_token_to_payment_intent_continuation",
+      "action": "human_checkout"
+    }
+  ],
+  "flows": [
+    {
+      "id": "mollie.hosted_components",
+      "psp": "mollie",
+      "operation": "mollie.card_request",
+      "operation_version": 1,
+      "mode": "token",
+      "server_constraint": "eligible",
+      "limitations": [
+        "The payment request must match the supported Mollie Components card-token format.",
+        "Authentication and merchant confirmation must finish in the merchant browser.",
+        "Merchant configuration, card eligibility and processor approval still determine whether the purchase succeeds."
+      ]
+    },
+    {
+      "id": "vgs.iframe_bound_tokenization",
+      "psp": "vgs",
+      "operation": "vgs.iframe_bound_tokenization",
+      "operation_version": 1,
+      "mode": "token",
+      "server_constraint": "unsupported",
+      "limitations": [
+        "VGS requires tokenization from its own iframe; the Vault cannot replay this flow from the approval page."
+      ]
+    }
+  ],
+  "direct_sdk_profile": {
+    "schema_version": 1,
+    "profile_version": "preflight-2",
+    "catalog_version": "2026-09-11.2",
+    "integration": {
+      "id": "direct_sdk",
+      "version": "bundled"
+    },
+    "processor_entries": [
+      {
+        "psp": "shopify",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "stripe",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "braintree",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "checkout_com",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "adyen",
+        "mode": "cse",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "tranzila",
+        "mode": "hosted_form",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "square",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "authorize_net",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "worldpay",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "nuvei",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "airwallex",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "rapyd",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "dlocal",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "ebanx",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "mercado_pago",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "payu",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "razorpay",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "mollie",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "paysafe",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "recurly",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "moneris",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "bambora",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      },
+      {
+        "psp": "global_payments",
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      }
+    ],
+    "entries": [
+      {
+        "flow": "mollie.hosted_components",
+        "operation": "mollie.card_request",
+        "operation_version": 1,
+        "mode": "token",
+        "scenario": "one_time",
+        "status": "supported"
+      }
+    ]
+  },
+  "kernel_profile_template": {
+    "schema_version": 1,
+    "profile_version": "kernel-template-1",
+    "catalog_version": "2026-09-11.2",
+    "integration": {
+      "id": "kernel_native",
+      "version": "REPLACE-WITH-ADAPTER-VERSION"
+    },
+    "entries": [],
+    "processor_entries": []
+  },
+  "observation_reason_codes": [
+    "collection_timeout",
+    "frame_limit",
+    "signal_limit",
+    "snapshot_limit",
+    "frame_unavailable",
+    "navigation_changed",
+    "invalid_observation",
+    "invalid_url",
+    "collection_incomplete"
+  ]
+}