@agent-cards/sdk 0.20.0 → 0.22.0

package/dist/preflight-catalog.json

@@ -2203,6 +2203,29 @@
       "hostname_pattern": "^commercehub-secure-data-capture\\.fiservapps\\.com$",
       "pathname_pattern": "^\\/sdk-secure\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/iframe\\.html$"
     },
+    {
+      "id": "verifone-secure-card-capture-script",
+      "psp": "verifone",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://us.jsclient.verifone.cloud",
+      "path_pattern": "/verifone.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://us.jsclient.verifone.cloud/verifone.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://verifone.cloud/docs/online-payments/securecardcapture",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^us\\.jsclient\\.verifone\\.cloud$",
+      "pathname_pattern": "^\\/verifone\\.js$"
+    },
     {
       "id": "gmo-mp-token-script",
       "psp": "gmo_pg",
@@ -2294,318 +2317,1865 @@
       "pathname_pattern": "^\\/link\\/"
     },
     {
-      "id": "gmo-mp-token-script-test",
-      "psp": "gmo_pg",
+      "id": "cybersource-flex-microform-script",
+      "psp": "cybersource_flex",
       "kinds": [
         "script"
       ],
-      "origin": "https://stg.static.mul-pay.jp",
-      "path_pattern": "/payment/js/mp-token.js",
+      "origin": "https://flex.cybersource.com",
+      "path_pattern": "/microform/bundle/v2{,.:minor.:patch}/flex-microform.min.js",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://static.mul-pay.jp/payment/js/mp-token.js",
-          "reviewed_on": "2026-09-25"
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/flex-microform.min.js",
+          "reviewed_on": "2026-09-23"
         },
-        {
-          "kind": "official_documentation",
-          "reference": "https://docs.gmo-pg.com/mulpay/docs/developer-support/mp-token/overview",
-          "reviewed_on": "2026-09-25"
-        }
-      ],
-      "hostname_pattern": "^stg\\.static\\.mul-pay\\.jp$",
-      "pathname_pattern": "^\\/payment\\/js\\/mp-token\\.js$"
-    },
-    {
-      "id": "gmo-token-v1-script-test",
-      "psp": "gmo_pg",
-      "kinds": [
-        "script"
-      ],
-      "origin": "https://stg.static.mul-pay.jp",
-      "path_pattern": "/ext/js/token.js",
-      "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://static.mul-pay.jp/ext/js/token.js",
-          "reviewed_on": "2026-09-25"
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/iframe.min.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.cybersource.com/docs/cybs/en-us/digital-accept-flex-api/developer/ctv/rest/flex-api/microform-integ-v2/microform-integ-getting-started-v2/creating-server-side-context-v2.html",
+          "reviewed_on": "2026-09-23"
         }
       ],
-      "variant_unverified": "GMO token v1 (ext/js/token.js) sends the card as a JSONP GET; only token v2 (mp-token.js) getToken on the shared-key path is admitted.",
-      "hostname_pattern": "^stg\\.static\\.mul-pay\\.jp$",
-      "pathname_pattern": "^\\/ext\\/js\\/token\\.js$"
+      "hostname_pattern": "^flex\\.cybersource\\.com$",
+      "pathname_pattern": "^\\/microform\\/bundle\\/v2(?:\\.[0-9]+\\.[0-9]+)?\\/flex-microform\\.min\\.js$"
     },
     {
-      "id": "gmo-elements-card-frame-test",
-      "psp": "gmo_pg",
+      "id": "cybersource-flex-microform-field",
+      "psp": "cybersource_flex",
       "kinds": [
         "frame",
         "iframe",
         "document"
       ],
-      "origin": "https://stg.static.mul-pay.jp",
-      "path_pattern": "/payment/js/elements/static/formElement.html",
+      "origin": "https://flex.cybersource.com",
+      "path_pattern": "/microform/bundle/v:version/iframe.html",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://static.mul-pay.jp/payment/js/mp-token.js",
-          "reviewed_on": "2026-09-25"
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/flex-microform.min.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/iframe.min.js",
+          "reviewed_on": "2026-09-23"
         },
         {
           "kind": "official_documentation",
-          "reference": "https://docs.gmo-pg.com/mulpay/docs/developer-support/mp-token/overview",
-          "reviewed_on": "2026-09-25"
+          "reference": "https://developer.cybersource.com/docs/cybs/en-us/digital-accept-flex-api/developer/ctv/rest/flex-api/microform-integ-v2/microform-integ-getting-started-v2/creating-server-side-context-v2.html",
+          "reviewed_on": "2026-09-23"
         }
       ],
-      "variant_unverified": "GMO Elements takes the card in GMO's own iframes and encrypts it under a merchant-registered key; it is not admitted.",
-      "hostname_pattern": "^stg\\.static\\.mul-pay\\.jp$",
-      "pathname_pattern": "^\\/payment\\/js\\/elements\\/static\\/formElement\\.html$"
+      "hostname_pattern": "^flex\\.cybersource\\.com$",
+      "pathname_pattern": "^\\/microform\\/bundle\\/v2\\.[0-9]+\\.[0-9]+\\/iframe\\.html$"
     },
     {
-      "id": "gmo-link-hosted-page-test",
-      "psp": "gmo_pg",
+      "id": "juspay-hypercheckout-payment-page",
+      "psp": "juspay",
       "kinds": [
         "document",
         "frame",
-        "iframe",
-        "form"
+        "iframe"
       ],
-      "origin": "https://pt01.mul-pay.jp",
-      "path_pattern": "/link/*",
+      "origin": "https://api.juspay.in",
+      "path_pattern": "/orders/:order/payment-page",
       "sources": [
         {
-          "kind": "official_documentation",
-          "reference": "https://docs.gmo-pg.com/mulpay/docs/developer-support/test-environment/overview",
-          "reviewed_on": "2026-09-25"
+          "kind": "primary_source",
+          "reference": "https://juspay.io/in/docs/api-reference/docs/express-checkout/session",
+          "reviewed_on": "2026-09-23"
         }
       ],
-      "variant_unverified": "A GMO Link-type payment page takes the card on GMO's own hosted page; it is not admitted.",
-      "hostname_pattern": "^pt01\\.mul-pay\\.jp$",
-      "pathname_pattern": "^\\/link\\/"
+      "variant_unverified": "The Juspay HyperCheckout payment page at /orders/:order/payment-page sends the card from Juspay's own page, a request the Vault does not take over.",
+      "hostname_pattern": "^api\\.juspay\\.in$",
+      "pathname_pattern": "^\\/orders\\/ordeh_[A-Za-z0-9]+\\/payment-page$"
     },
     {
-      "id": "square-web-sdk-sandbox",
-      "psp": "square",
+      "id": "pelecard-payment-page",
+      "psp": "pelecard",
       "kinds": [
-        "script",
+        "document",
         "frame",
         "iframe"
       ],
-      "origin": "https://sandbox.web.squarecdn.com",
-      "path_pattern": "/v1/square.js",
-      "hostname_pattern": "^sandbox\\.web\\.squarecdn\\.com$",
-      "pathname_pattern": "^\\/v1\\/square\\.js$",
+      "origin": "https://gateway21.pelecard.biz",
+      "path_pattern": "/PaymentGW",
       "sources": [
         {
-          "kind": "official_documentation",
-          "reference": "https://developer.squareup.com/docs/web-payments/quickstart/add-sdk-to-web-client",
-          "reviewed_on": "2026-09-11"
+          "kind": "primary_source",
+          "reference": "https://gateway21.pelecard.biz/ManualIframe/Chart",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.pelecard.com/documentation/iframe-redirect-programmer-manual-version-06-2025/",
+          "reviewed_on": "2026-09-25"
         }
-      ]
+      ],
+      "hostname_pattern": "^gateway21\\.pelecard\\.biz$",
+      "pathname_pattern": "^\\/PaymentGW\\/?$"
     },
     {
-      "id": "paysafe-js-test",
-      "psp": "paysafe",
+      "id": "pelecard-payment-script",
+      "psp": "pelecard",
       "kinds": [
-        "script",
-        "frame",
-        "iframe"
+        "script"
       ],
-      "origin": "https://hosted.test.paysafe.com",
-      "path_pattern": "/{js,checkout}/*",
-      "hostname_pattern": "^hosted\\.test\\.paysafe\\.com$",
-      "pathname_pattern": "^\\/(?:js|checkout)\\/",
+      "origin": "https://gateway21.pelecard.biz",
+      "path_pattern": "/Scripts/Payment/{Payment,General}.js",
       "sources": [
         {
-          "kind": "official_documentation",
-          "reference": "https://developer.paysafe.com/en/api-docs/paysafe-js/overview/",
-          "reviewed_on": "2026-09-11"
+          "kind": "primary_source",
+          "reference": "https://gateway21.pelecard.biz/Scripts/Payment/Payment.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://gateway21.pelecard.biz/Scripts/Payment/General.js",
+          "reviewed_on": "2026-09-25"
         }
-      ]
+      ],
+      "hostname_pattern": "^gateway21\\.pelecard\\.biz$",
+      "pathname_pattern": "^\\/Scripts\\/Payment\\/(?:Payment|General)\\.js$"
     },
     {
-      "id": "worldpay-checkout-sdk-try",
-      "psp": "worldpay",
+      "id": "pelecard-legacy-payment-form",
+      "psp": "pelecard",
       "kinds": [
-        "script",
+        "document",
         "frame",
-        "iframe"
+        "iframe",
+        "form"
       ],
-      "origin": "https://try.access.worldpay.com",
-      "path_pattern": "/access-checkout/*",
-      "hostname_pattern": "^try\\.access\\.worldpay\\.com$",
-      "pathname_pattern": "^\\/access-checkout\\/",
+      "origin": "https://gateway.pelecard.biz",
+      "path_pattern": "/PayProcess/Transaction",
       "sources": [
         {
-          "kind": "official_documentation",
-          "reference": "https://developer.worldpay.com/products/checkout/web",
-          "reviewed_on": "2026-09-11"
+          "kind": "primary_source",
+          "reference": "https://gateway.pelecard.biz/",
+          "reviewed_on": "2026-09-25"
         }
-      ]
+      ],
+      "variant_unverified": "The implemented Pelecard adapter covers the Iframe/Redirect 2.0 card submission on gateway21 and gateway20.pelecard.biz; the legacy 1.0 page on gateway.pelecard.biz posts the card as a top-level form and is not admitted.",
+      "hostname_pattern": "^gateway\\.pelecard\\.biz$",
+      "pathname_pattern": "^\\/PayProcess\\/Transaction$"
     },
     {
-      "id": "authorize-net-accept-test",
-      "psp": "authorize_net",
+      "id": "aci-copyandpay-widget-script",
+      "psp": "aci",
       "kinds": [
         "script"
       ],
-      "origin": "https://jstest.authorize.net",
-      "path_pattern": "/v{1,3}/Accept{UI}.js",
-      "hostname_pattern": "^jstest\\.authorize\\.net$",
-      "pathname_pattern": "^\\/v[13]\\/Accept(?:UI)?\\.js$",
+      "origin": "https://eu-prod.oppwa.com",
+      "path_pattern": "/v1/paymentWidgets.js",
       "sources": [
         {
-          "kind": "official_documentation",
-          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
-          "reviewed_on": "2026-09-11"
+          "kind": "primary_source",
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.aciworldwide.com/integration-guide",
+          "reviewed_on": "2026-09-25"
         }
-      ]
+      ],
+      "hostname_pattern": "^eu-prod\\.oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/paymentWidgets\\.js$"
     },
     {
-      "id": "tranzila-terminal-hosted-page-directng",
-      "psp": "tranzila",
+      "id": "aci-copyandpay-card-frame",
+      "psp": "aci",
       "kinds": [
-        "document",
         "frame",
         "iframe",
-        "form"
+        "document"
       ],
-      "origin": "https://directng.tranzila.com",
-      "path_pattern": "/:terminal/",
+      "origin": "https://eu-prod.oppwa.com",
+      "path_pattern": "/v1/pciIframe.html",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://docs.tranzila.com/docs/payments-and-billing/hosted-payment-page",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://eu-prod.oppwa.com/v1/pciIframe.html",
+          "reviewed_on": "2026-09-25"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:tranzila-terminal-root-hosted-page",
-          "reviewed_on": "2026-09-15"
+          "kind": "primary_source",
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "variant_unverified": "The implemented Tranzila hosted form covers direct.tranzila.com/:terminal/iframenew.php; a terminal-root hosted payment page is not admitted.",
-      "hostname_pattern": "^directng\\.tranzila\\.com$",
-      "pathname_pattern": "^\\/(?!process(?:\\/|$)|done(?:\\/|$))[A-Za-z0-9_-]+\\/?$"
+      "hostname_pattern": "^eu-prod\\.oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/pciIframe\\.html$"
     },
     {
-      "id": "square-card-element-frame-sandbox",
-      "psp": "square",
+      "id": "creditguard-pps-hosted-page",
+      "psp": "creditguard",
       "kinds": [
+        "document",
         "frame",
         "iframe"
       ],
-      "origin": "https://sandbox.web.squarecdn.com",
-      "path_pattern": "/:version/single-card-element-iframe.html",
+      "origin": "https://pps.creditguard.co.il",
+      "path_pattern": "/",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://developer.squareup.com/docs/web-payments/take-card-payment",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://www.creditguard.co.il/wp-content/uploads/2021/10/CG-Gateway-Redirect-API-for-PPS.pdf",
+          "reviewed_on": "2026-09-25"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:square-single-card-element-iframe-1.84.5",
-          "reviewed_on": "2026-09-15"
+          "kind": "primary_source",
+          "reference": "https://pps.creditguard.co.il/",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "hostname_pattern": "^sandbox\\.web\\.squarecdn\\.com$",
-      "pathname_pattern": "^\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/single-card-element-iframe\\.html$"
+      "hostname_pattern": "^pps\\.creditguard\\.co\\.il$",
+      "pathname_pattern": "^\\/$"
     },
     {
-      "id": "authorize-net-sim-hosted-form-secure2",
-      "psp": "authorize_net",
+      "id": "creditguard-pps-template-script",
+      "psp": "creditguard",
       "kinds": [
-        "document",
-        "frame",
-        "iframe",
-        "form"
+        "script"
       ],
-      "origin": "https://secure2.authorize.net",
-      "path_pattern": "/gateway/transact.dll",
+      "origin": "https://pps.creditguard.co.il",
+      "path_pattern": "/templates/:template/main.js",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://developer.authorize.net/api/upgrade_guide.html",
-          "reviewed_on": "2026-09-15"
-        },
-        {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:authorize-net-hosted-transact-form",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://pps.creditguard.co.il/templates/cgt-basic/main.js",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "variant_unverified": "The implemented Authorize.Net adapter covers Accept.js card requests; the hosted SIM payment form at secure.authorize.net/gateway/transact.dll posts the card as a top-level form and is not admitted.",
-      "hostname_pattern": "^secure2\\.authorize\\.net$",
-      "pathname_pattern": "^\\/gateway\\/transact\\.dll$"
+      "hostname_pattern": "^pps\\.creditguard\\.co\\.il$",
+      "pathname_pattern": "^\\/templates\\/[A-Za-z0-9_-]{1,64}\\/main\\.js$"
     },
     {
-      "id": "worldpay-hosted-payment-page-test",
-      "psp": "worldpay",
+      "id": "creditguard-legacy-mpi-page",
+      "psp": "creditguard",
       "kinds": [
         "document",
         "frame",
         "iframe",
         "form"
       ],
-      "origin": "https://secure-test.worldpay.com",
-      "path_pattern": "/wcc/{purchase,card}",
+      "origin": "https://cgmpi.creditguard.co.il",
+      "path_pattern": "/CGMPI_Server/PerformTransaction",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://docs.worldpay.com/access/products/checkout/web",
-          "reviewed_on": "2026-09-15"
-        },
-        {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:worldpay-hosted-payment-page-card",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://www.creditguard.co.il/wp-content/uploads/2020/11/CG-Gateway-Redirect-API.pdf",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "variant_unverified": "The implemented Worldpay adapter covers Access Checkout card sessions; Worldpay hosted payment pages under secure.worldpay.com/wcc post the card to Worldpay directly and are not admitted.",
-      "hostname_pattern": "^secure-test\\.worldpay\\.com$",
-      "pathname_pattern": "^\\/wcc\\/(?:purchase|card)$"
+      "variant_unverified": "The implemented CreditGuard adapter covers the PPS page on pps, pps2 and ppsuat.creditguard.co.il; the legacy CGMPI page on cgmpi.creditguard.co.il is not admitted.",
+      "hostname_pattern": "^cgmpi\\.creditguard\\.co\\.il$",
+      "pathname_pattern": "^\\/CGMPI_Server\\/PerformTransaction$"
     },
     {
-      "id": "rapyd-hosted-checkout-page-sandbox",
-      "psp": "rapyd",
+      "id": "primer-core-sdk-script",
+      "psp": "primer",
       "kinds": [
-        "document",
-        "frame",
-        "iframe"
+        "script"
       ],
-      "origin": "https://sandboxcheckout.rapyd.net",
-      "path_pattern": "/",
+      "origin": "https://sdk.primer.io",
+      "path_pattern": "/web/v2.:minor.:patch/PrimerCoreSDK.min.js",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://docs.rapyd.net/en/hosted-checkout-page.html",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://sdk.primer.io/web/v2.63.0/PrimerCoreSDK.min.js",
+          "reviewed_on": "2026-09-25"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:rapyd-hosted-checkout-page",
-          "reviewed_on": "2026-09-15"
+          "kind": "primary_source",
+          "reference": "https://www.npmjs.com/package/@primer-io/checkout-web/v/2.65.0",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "hostname_pattern": "^sandboxcheckout\\.rapyd\\.net$",
-      "pathname_pattern": "^\\/$"
+      "hostname_pattern": "^sdk\\.primer\\.io$",
+      "pathname_pattern": "^\\/web\\/v2\\.[0-9]+\\.[0-9]+\\/PrimerCoreSDK\\.min\\.js$"
     },
     {
-      "id": "adyen-secured-fields-live-us",
-      "psp": "adyen",
+      "id": "primer-card-frame",
+      "psp": "primer",
       "kinds": [
+        "document",
         "frame",
-        "iframe",
-        "document"
+        "iframe"
       ],
-      "origin": "https://checkoutshopper-live-us.adyen.com",
-      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "origin": "https://sdk.primer.io",
+      "path_pattern": "/web/v2.:minor.:patch/{hosted-input,api-controller}.html",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
-          "reviewed_on": "2026-09-11"
+          "reference": "https://sdk.primer.io/web/v2.63.0/hosted-input.html",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://sdk.primer.io/web/v2.63.0/api-controller.html",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^sdk\\.primer\\.io$",
+      "pathname_pattern": "^\\/web\\/v2\\.[0-9]+\\.[0-9]+\\/(?:hosted-input|api-controller)\\.html$"
+    },
+    {
+      "id": "primer-checkout-api-controller",
+      "psp": "primer",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "script"
+      ],
+      "origin": "https://sdk.primer.io",
+      "path_pattern": "/web/hosted-pages/:version/api-controller.{html,mjs}",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://sdk.primer.io/web/hosted-pages/v1.1.0/api-controller.mjs",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://www.npmjs.com/package/@primer-io/primer-js/v/1.10.1",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The implemented Primer adapter covers the Web SDK v2 card tokenization; Primer Checkout (primer-js) sends the card from a hosted api-controller that gives up on the request after 30 seconds and is not admitted.",
+      "hostname_pattern": "^sdk\\.primer\\.io$",
+      "pathname_pattern": "^\\/web\\/hosted-pages\\/v[0-9]+\\.[0-9]+\\.[0-9]+\\/api-controller\\.(?:html|mjs)$"
+    },
+    {
+      "id": "payrails-web-sdk-v6-script",
+      "psp": "payrails",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://assets.payrails.io",
+      "path_pattern": "/web-sdk/{v6,6.:minor.:patch}/payrails.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.payrails.io/web-sdk/v6/payrails.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://www.npmjs.com/package/@payrails/web-sdk/v/6.5.0",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^assets\\.payrails\\.io$",
+      "pathname_pattern": "^\\/web-sdk\\/v?6(?:\\.[0-9]+\\.[0-9]+)?\\/payrails\\.js$"
+    },
+    {
+      "id": "payrails-secure-frame-v6",
+      "psp": "payrails",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://assets.payrails.io",
+      "path_pattern": "/apps/secure-frame/{v6,6.:minor.:patch}/index.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.payrails.io/apps/secure-frame/v6/index.html",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.payrails.com/docs/secure-fields",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^assets\\.payrails\\.io$",
+      "pathname_pattern": "^\\/apps\\/secure-frame\\/(?:v6|6\\.[0-9]+\\.[0-9]+)\\/index\\.html$"
+    },
+    {
+      "id": "elavon-converge-hosted-payment-page",
+      "psp": "elavon_converge",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://api.convergepay.com",
+      "path_pattern": "/hosted-payments/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.elavon.com/products/hosted-payment-page/v1/take-a-payment",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^api\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/$"
+    },
+    {
+      "id": "elavon-converge-hpp-bundle",
+      "psp": "elavon_converge",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://api.convergepay.com",
+      "path_pattern": "/hosted-payments/assets/hpp-:version.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/assets/hpp-2.505.07.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^api\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/assets\\/hpp-[0-9]+\\.[0-9]+\\.[0-9]+\\.js$"
+    },
+    {
+      "id": "elavon-converge-lightbox",
+      "psp": "elavon_converge",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://api.convergepay.com",
+      "path_pattern": "/hosted-payments/hpm",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://api.demo.convergepay.com/hosted-payments/hpm",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/PayWithConverge.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The implemented Elavon Converge adapter covers the Hosted Payment Page; the Lightbox payment modal at hosted-payments/hpm posts to its own endpoint and is not admitted.",
+      "hostname_pattern": "^api\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/hpm\\/?$"
+    },
+    {
+      "id": "elavon-converge-checkout-js",
+      "psp": "elavon_converge",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://api.convergepay.com",
+      "path_pattern": "/hosted-payments/{Checkout,PayWithConverge}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/Checkout.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/PayWithConverge.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The implemented Elavon Converge adapter covers the Hosted Payment Page; Checkout.js and the Lightbox launcher post the card from the merchant page and are not admitted.",
+      "hostname_pattern": "^api\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/(?:Checkout|PayWithConverge)\\.js$"
+    },
+    {
+      "id": "worldpay-eprotect-js-api",
+      "psp": "worldpay_eprotect",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://request.eprotect.vantivcnp.com",
+      "path_pattern": "/eProtect/{eProtect,litle}-api{2,3}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^request\\.eprotect\\.vantivcnp\\.com$",
+      "pathname_pattern": "^\\/eProtect\\/(?:eProtect|litle)-api[23]\\.js$"
+    },
+    {
+      "id": "worldpay-eprotect-iframe-client",
+      "psp": "worldpay_eprotect",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://request.eprotect.vantivcnp.com",
+      "path_pattern": "/eProtect/js/{payframe,eProtect-iframe}-client{3,4}[.min].js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^request\\.eprotect\\.vantivcnp\\.com$",
+      "pathname_pattern": "^\\/eProtect\\/js\\/(?:payframe|eProtect-iframe)-client[34](?:\\.min)?\\.js$"
+    },
+    {
+      "id": "worldpay-eprotect-payframe",
+      "psp": "worldpay_eprotect",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://request.eprotect.vantivcnp.com",
+      "path_pattern": "/eProtect/payframe_:paypageId_:style.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^request\\.eprotect\\.vantivcnp\\.com$",
+      "pathname_pattern": "^\\/eProtect\\/payframe_[A-Za-z0-9]{1,64}_[A-Za-z0-9_-]{1,96}\\.html$"
+    },
+    {
+      "id": "worldpay-eprotect-merchant-domain",
+      "psp": "worldpay_eprotect",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://paypage.bhphotovideo.com",
+      "path_pattern": "/eProtect/{eProtect,litle}-api{2,3}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "This eProtect script is served from a merchant-named domain, not a Worldpay eProtect host; only Worldpay’s own eProtect hosts are covered.",
+      "hostname_pattern": "^paypage\\.bhphotovideo\\.com$",
+      "pathname_pattern": "^\\/eProtect\\/(?:eProtect|litle)-api[23]\\.js$"
+    },
+    {
+      "id": "wspay-components-script",
+      "psp": "wspay",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://proxy.wspay.biz",
+      "path_pattern": "/dist/{components,monri}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://proxy.wspay.biz/dist/components.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://proxy.wspay.biz/dist/monri.js",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^proxy\\.wspay\\.biz$",
+      "pathname_pattern": "^\\/dist\\/(?:components|monri)\\.js$"
+    },
+    {
+      "id": "wspay-components-card-frame",
+      "psp": "wspay",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://proxy.wspay.biz",
+      "path_pattern": "/v2/js/payment-method-component-dynamic.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://proxy.wspay.biz/dist/components.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://proxy.wspay.biz/v2/js/payment-method-component-dynamic.html",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^proxy\\.wspay\\.biz$",
+      "pathname_pattern": "^\\/v2\\/js\\/payment-method-component-dynamic\\.html$"
+    },
+    {
+      "id": "wspay-form-hosted-page",
+      "psp": "wspay",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://form.wspay.biz",
+      "path_pattern": "/authorization{,.aspx}",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.wspay.info/wspayform",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "The implemented WSPay adapter covers the WSPay Components card confirm on proxy.wspay.biz; the WSPay Form hosted page posts the card to form.wspay.biz and is not admitted.",
+      "hostname_pattern": "^form\\.wspay\\.biz$",
+      "pathname_pattern": "^\\/authorization(?:\\.aspx)?$"
+    },
+    {
+      "id": "monri-components-script",
+      "psp": "monri",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://ipg.monri.com",
+      "path_pattern": "/dist/{components,monri}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://ipg.monri.com/en/documentation/components",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://ipg.monri.com/dist/components.js",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.",
+      "hostname_pattern": "^ipg\\.monri\\.com$",
+      "pathname_pattern": "^\\/dist\\/(?:components|monri)\\.js$"
+    },
+    {
+      "id": "monri-components-card-frame",
+      "psp": "monri",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://ipg.monri.com",
+      "path_pattern": "/v2/js/payment-{method-component-dynamic,component}.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://ipg.monri.com/dist/components.js",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.",
+      "hostname_pattern": "^ipg\\.monri\\.com$",
+      "pathname_pattern": "^\\/v2\\/js\\/payment-(?:method-component-dynamic|component)\\.html$"
+    },
+    {
+      "id": "mycheck-wallet-v3-script",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://wallet-sdk-v3.mycheckapp.com",
+      "path_pattern": "/:version/static/js/main.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.shijipayment.com/sts/sts.proxy.v2.1.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/static/js/main.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^wallet-sdk-v3\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9._-]+\\/static\\/js\\/main\\.js$"
+    },
+    {
+      "id": "shiji-sts-proxy-script",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://cdn.shijipayment.com",
+      "path_pattern": "/sts/sts.proxy.v2.1.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.shijipayment.com/sts/sts.proxy.v2.1.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/static/js/main.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^cdn\\.shijipayment\\.com$",
+      "pathname_pattern": "^\\/sts\\/sts\\.proxy\\.v2\\.1\\.js$"
+    },
+    {
+      "id": "mycheck-wallet-v3-iframe-sdk",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://wallet-sdk-v3.mycheckapp.com",
+      "path_pattern": "/:version/sdk.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/sdk.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The MyCheck wallet iframe integration sends the card from MyCheck's own frame; only the in-page wallet (main.js) is admitted.",
+      "hostname_pattern": "^wallet-sdk-v3\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9._-]+\\/sdk\\.js$"
+    },
+    {
+      "id": "mycheck-wallet-v3-iframe",
+      "psp": "shiji_sts",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://wallet-sdk-v3.mycheckapp.com",
+      "path_pattern": "/wallet-iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/wallet-iframe.html",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The MyCheck wallet iframe integration sends the card from MyCheck's own frame; only the in-page wallet (main.js) is admitted.",
+      "hostname_pattern": "^wallet-sdk-v3\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/wallet-iframe\\.html$"
+    },
+    {
+      "id": "shiji-ps-js-apm-script",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://cdn.shijipayment.com",
+      "path_pattern": "/libraries/shijipayments.latest.min.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.shijipayment.com/libraries/shijipayments.latest.min.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "Shiji's ps-js-apm library can take its STS key and URL from server configuration; only the MyCheck Wallet V3 path under the pinned key is admitted.",
+      "hostname_pattern": "^cdn\\.shijipayment\\.com$",
+      "pathname_pattern": "^\\/libraries\\/shijipayments\\.latest\\.min\\.js$"
+    },
+    {
+      "id": "amadeus-checkout-sdk-script",
+      "psp": "amadeus_checkout",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://prd.payment.amadeus.com",
+      "path_pattern": "/checkout/sdk/:version/sdk-{es5,es2015,es2022}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/7.1.0/sdk-es2022.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/manifest.json",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^prd\\.payment\\.amadeus\\.com$",
+      "pathname_pattern": "^\\/checkout\\/sdk\\/[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\/sdk-es(?:5|2015|2022)\\.js$"
+    },
+    {
+      "id": "amadeus-checkout-sdk-frame",
+      "psp": "amadeus_checkout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://prd.payment.amadeus.com",
+      "path_pattern": "/checkout/sdk/:version/form-fields/{tunnel,pan,cvv}.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/7.1.0/form-fields/tunnel.html",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/outpaycelab/outpayce-checkout-sdk-web/blob/main/userguide.md",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^prd\\.payment\\.amadeus\\.com$",
+      "pathname_pattern": "^\\/checkout\\/sdk\\/[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\/form-fields\\/(?:tunnel|pan|cvv)\\.html$"
+    },
+    {
+      "id": "amadeus-data-collection-page",
+      "psp": "amadeus_checkout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://paypages.payment.amadeus.com",
+      "path_pattern": "/1ASIATP/ATPDCP/land/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://paypages.payment.amadeus.com/1ASIATP/ATPDCP/static/dcppages/standard/js/standard-acb53a79a0.min.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^paypages\\.payment\\.amadeus\\.com$",
+      "pathname_pattern": "^\\/1ASIATP\\/ATPDCP\\/land\\/?$"
+    },
+    {
+      "id": "worldline-mycheckout-page",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://payment.pay1.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout/{payment-product-details/}:hosted_checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay1\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout\\/(?:payment-product-details\\/)?[1-9][0-9]{0,9}-[0-9a-f]{32}:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}:[0-9a-f]{32}$"
+    },
+    {
+      "id": "worldline-mycheckout-card-form",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "form"
+      ],
+      "origin": "https://payment.pay1.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay1\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout$"
+    },
+    {
+      "id": "gmo-mp-token-script-test",
+      "psp": "gmo_pg",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://stg.static.mul-pay.jp",
+      "path_pattern": "/payment/js/mp-token.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://static.mul-pay.jp/payment/js/mp-token.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.gmo-pg.com/mulpay/docs/developer-support/mp-token/overview",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^stg\\.static\\.mul-pay\\.jp$",
+      "pathname_pattern": "^\\/payment\\/js\\/mp-token\\.js$"
+    },
+    {
+      "id": "gmo-token-v1-script-test",
+      "psp": "gmo_pg",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://stg.static.mul-pay.jp",
+      "path_pattern": "/ext/js/token.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://static.mul-pay.jp/ext/js/token.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "GMO token v1 (ext/js/token.js) sends the card as a JSONP GET; only token v2 (mp-token.js) getToken on the shared-key path is admitted.",
+      "hostname_pattern": "^stg\\.static\\.mul-pay\\.jp$",
+      "pathname_pattern": "^\\/ext\\/js\\/token\\.js$"
+    },
+    {
+      "id": "gmo-elements-card-frame-test",
+      "psp": "gmo_pg",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://stg.static.mul-pay.jp",
+      "path_pattern": "/payment/js/elements/static/formElement.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://static.mul-pay.jp/payment/js/mp-token.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.gmo-pg.com/mulpay/docs/developer-support/mp-token/overview",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "GMO Elements takes the card in GMO's own iframes and encrypts it under a merchant-registered key; it is not admitted.",
+      "hostname_pattern": "^stg\\.static\\.mul-pay\\.jp$",
+      "pathname_pattern": "^\\/payment\\/js\\/elements\\/static\\/formElement\\.html$"
+    },
+    {
+      "id": "gmo-link-hosted-page-test",
+      "psp": "gmo_pg",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://pt01.mul-pay.jp",
+      "path_pattern": "/link/*",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.gmo-pg.com/mulpay/docs/developer-support/test-environment/overview",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "A GMO Link-type payment page takes the card on GMO's own hosted page; it is not admitted.",
+      "hostname_pattern": "^pt01\\.mul-pay\\.jp$",
+      "pathname_pattern": "^\\/link\\/"
+    },
+    {
+      "id": "cybersource-flex-microform-script-test",
+      "psp": "cybersource_flex",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://testflex.cybersource.com",
+      "path_pattern": "/microform/bundle/v2{,.:minor.:patch}/flex-microform.min.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/flex-microform.min.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/iframe.min.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.cybersource.com/docs/cybs/en-us/digital-accept-flex-api/developer/ctv/rest/flex-api/microform-integ-v2/microform-integ-getting-started-v2/creating-server-side-context-v2.html",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^testflex\\.cybersource\\.com$",
+      "pathname_pattern": "^\\/microform\\/bundle\\/v2(?:\\.[0-9]+\\.[0-9]+)?\\/flex-microform\\.min\\.js$"
+    },
+    {
+      "id": "cybersource-flex-microform-field-test",
+      "psp": "cybersource_flex",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://testflex.cybersource.com",
+      "path_pattern": "/microform/bundle/v:version/iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/flex-microform.min.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://flex.cybersource.com/microform/bundle/v2.12.1/iframe.min.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.cybersource.com/docs/cybs/en-us/digital-accept-flex-api/developer/ctv/rest/flex-api/microform-integ-v2/microform-integ-getting-started-v2/creating-server-side-context-v2.html",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^testflex\\.cybersource\\.com$",
+      "pathname_pattern": "^\\/microform\\/bundle\\/v2\\.[0-9]+\\.[0-9]+\\/iframe\\.html$"
+    },
+    {
+      "id": "worldpay-eprotect-js-api-prelive",
+      "psp": "worldpay_eprotect",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://request.eprotect.vantivprelive.com",
+      "path_pattern": "/eProtect/{eProtect,litle}-api{2,3}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^request\\.eprotect\\.vantivprelive\\.com$",
+      "pathname_pattern": "^\\/eProtect\\/(?:eProtect|litle)-api[23]\\.js$"
+    },
+    {
+      "id": "worldpay-eprotect-iframe-client-prelive",
+      "psp": "worldpay_eprotect",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://request.eprotect.vantivprelive.com",
+      "path_pattern": "/eProtect/js/{payframe,eProtect-iframe}-client{3,4}[.min].js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^request\\.eprotect\\.vantivprelive\\.com$",
+      "pathname_pattern": "^\\/eProtect\\/js\\/(?:payframe|eProtect-iframe)-client[34](?:\\.min)?\\.js$"
+    },
+    {
+      "id": "worldpay-eprotect-payframe-prelive",
+      "psp": "worldpay_eprotect",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://request.eprotect.vantivprelive.com",
+      "path_pattern": "/eProtect/payframe_:paypageId_:style.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^request\\.eprotect\\.vantivprelive\\.com$",
+      "pathname_pattern": "^\\/eProtect\\/payframe_[A-Za-z0-9]{1,64}_[A-Za-z0-9_-]{1,96}\\.html$"
+    },
+    {
+      "id": "mycheck-wallet-v3-script-sandbox",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://wallet-sdk-v3-sandbox.mycheckapp.com",
+      "path_pattern": "/:version/static/js/main.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.shijipayment.com/sts/sts.proxy.v2.1.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/static/js/main.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^wallet-sdk-v3-sandbox\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9._-]+\\/static\\/js\\/main\\.js$"
+    },
+    {
+      "id": "mycheck-wallet-v3-script-test",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://wallet-sdk-v3-test.mycheckapp.com",
+      "path_pattern": "/:version/static/js/main.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.shijipayment.com/sts/sts.proxy.v2.1.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/static/js/main.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^wallet-sdk-v3-test\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9._-]+\\/static\\/js\\/main\\.js$"
+    },
+    {
+      "id": "shiji-sts-proxy-script-dev",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://cdn.shijipayment.dev",
+      "path_pattern": "/sts/sts.proxy.v2.1.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://cdn.shijipayment.com/sts/sts.proxy.v2.1.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/static/js/main.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^cdn\\.shijipayment\\.dev$",
+      "pathname_pattern": "^\\/sts\\/sts\\.proxy\\.v2\\.1\\.js$"
+    },
+    {
+      "id": "mycheck-wallet-v3-iframe-sdk-sandbox",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://wallet-sdk-v3-sandbox.mycheckapp.com",
+      "path_pattern": "/:version/sdk.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/sdk.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The MyCheck wallet iframe integration sends the card from MyCheck's own frame; only the in-page wallet (main.js) is admitted.",
+      "hostname_pattern": "^wallet-sdk-v3-sandbox\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9._-]+\\/sdk\\.js$"
+    },
+    {
+      "id": "mycheck-wallet-v3-iframe-sdk-test",
+      "psp": "shiji_sts",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://wallet-sdk-v3-test.mycheckapp.com",
+      "path_pattern": "/:version/sdk.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/latest/sdk.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The MyCheck wallet iframe integration sends the card from MyCheck's own frame; only the in-page wallet (main.js) is admitted.",
+      "hostname_pattern": "^wallet-sdk-v3-test\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/[A-Za-z0-9._-]+\\/sdk\\.js$"
+    },
+    {
+      "id": "mycheck-wallet-v3-iframe-sandbox",
+      "psp": "shiji_sts",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://wallet-sdk-v3-sandbox.mycheckapp.com",
+      "path_pattern": "/wallet-iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/wallet-iframe.html",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The MyCheck wallet iframe integration sends the card from MyCheck's own frame; only the in-page wallet (main.js) is admitted.",
+      "hostname_pattern": "^wallet-sdk-v3-sandbox\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/wallet-iframe\\.html$"
+    },
+    {
+      "id": "mycheck-wallet-v3-iframe-test",
+      "psp": "shiji_sts",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://wallet-sdk-v3-test.mycheckapp.com",
+      "path_pattern": "/wallet-iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://wallet-sdk-v3.mycheckapp.com/wallet-iframe.html",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The MyCheck wallet iframe integration sends the card from MyCheck's own frame; only the in-page wallet (main.js) is admitted.",
+      "hostname_pattern": "^wallet-sdk-v3-test\\.mycheckapp\\.com$",
+      "pathname_pattern": "^\\/wallet-iframe\\.html$"
+    },
+    {
+      "id": "worldline-mycheckout-page-pay2",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://payment.pay2.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout/{payment-product-details/}:hosted_checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay2\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout\\/(?:payment-product-details\\/)?[1-9][0-9]{0,9}-[0-9a-f]{32}:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}:[0-9a-f]{32}$"
+    },
+    {
+      "id": "worldline-mycheckout-page-preprod",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://payment.pay1.preprod.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout/{payment-product-details/}:hosted_checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay1\\.preprod\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout\\/(?:payment-product-details\\/)?[1-9][0-9]{0,9}-[0-9a-f]{32}:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}:[0-9a-f]{32}$"
+    },
+    {
+      "id": "worldline-mycheckout-page-pay2-preprod",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://payment.pay2.preprod.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout/{payment-product-details/}:hosted_checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay2\\.preprod\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout\\/(?:payment-product-details\\/)?[1-9][0-9]{0,9}-[0-9a-f]{32}:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}:[0-9a-f]{32}$"
+    },
+    {
+      "id": "worldline-mycheckout-card-form-pay2",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "form"
+      ],
+      "origin": "https://payment.pay2.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay2\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout$"
+    },
+    {
+      "id": "worldline-mycheckout-card-form-preprod",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "form"
+      ],
+      "origin": "https://payment.pay1.preprod.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay1\\.preprod\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout$"
+    },
+    {
+      "id": "worldline-mycheckout-card-form-pay2-preprod",
+      "psp": "worldline_mycheckout",
+      "kinds": [
+        "form"
+      ],
+      "origin": "https://payment.pay2.preprod.checkout.worldline-solutions.com",
+      "path_pattern": "/checkout",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js",
+          "reviewed_on": "2026-09-30"
+        },
+        {
+          "kind": "official_documentation",
+          "reference": "https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/",
+          "reviewed_on": "2026-09-30"
+        }
+      ],
+      "hostname_pattern": "^payment\\.pay2\\.preprod\\.checkout\\.worldline-solutions\\.com$",
+      "pathname_pattern": "^\\/checkout$"
+    },
+    {
+      "id": "square-web-sdk-sandbox",
+      "psp": "square",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://sandbox.web.squarecdn.com",
+      "path_pattern": "/v1/square.js",
+      "hostname_pattern": "^sandbox\\.web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/v1\\/square\\.js$",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.squareup.com/docs/web-payments/quickstart/add-sdk-to-web-client",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "paysafe-js-test",
+      "psp": "paysafe",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://hosted.test.paysafe.com",
+      "path_pattern": "/{js,checkout}/*",
+      "hostname_pattern": "^hosted\\.test\\.paysafe\\.com$",
+      "pathname_pattern": "^\\/(?:js|checkout)\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.paysafe.com/en/api-docs/paysafe-js/overview/",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "worldpay-checkout-sdk-try",
+      "psp": "worldpay",
+      "kinds": [
+        "script",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://try.access.worldpay.com",
+      "path_pattern": "/access-checkout/*",
+      "hostname_pattern": "^try\\.access\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/access-checkout\\/",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.worldpay.com/products/checkout/web",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "authorize-net-accept-test",
+      "psp": "authorize_net",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://jstest.authorize.net",
+      "path_pattern": "/v{1,3}/Accept{UI}.js",
+      "hostname_pattern": "^jstest\\.authorize\\.net$",
+      "pathname_pattern": "^\\/v[13]\\/Accept(?:UI)?\\.js$",
+      "sources": [
+        {
+          "kind": "official_documentation",
+          "reference": "https://developer.authorize.net/api/reference/features/acceptjs.html",
+          "reviewed_on": "2026-09-11"
+        }
+      ]
+    },
+    {
+      "id": "tranzila-terminal-hosted-page-directng",
+      "psp": "tranzila",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://directng.tranzila.com",
+      "path_pattern": "/:terminal/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.tranzila.com/docs/payments-and-billing/hosted-payment-page",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:tranzila-terminal-root-hosted-page",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Tranzila hosted form covers direct.tranzila.com/:terminal/iframenew.php; a terminal-root hosted payment page is not admitted.",
+      "hostname_pattern": "^directng\\.tranzila\\.com$",
+      "pathname_pattern": "^\\/(?!process(?:\\/|$)|done(?:\\/|$))[A-Za-z0-9_-]+\\/?$"
+    },
+    {
+      "id": "square-card-element-frame-sandbox",
+      "psp": "square",
+      "kinds": [
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://sandbox.web.squarecdn.com",
+      "path_pattern": "/:version/single-card-element-iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.squareup.com/docs/web-payments/take-card-payment",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:square-single-card-element-iframe-1.84.5",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^sandbox\\.web\\.squarecdn\\.com$",
+      "pathname_pattern": "^\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/single-card-element-iframe\\.html$"
+    },
+    {
+      "id": "authorize-net-sim-hosted-form-secure2",
+      "psp": "authorize_net",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://secure2.authorize.net",
+      "path_pattern": "/gateway/transact.dll",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.authorize.net/api/upgrade_guide.html",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:authorize-net-hosted-transact-form",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Authorize.Net adapter covers Accept.js card requests; the hosted SIM payment form at secure.authorize.net/gateway/transact.dll posts the card as a top-level form and is not admitted.",
+      "hostname_pattern": "^secure2\\.authorize\\.net$",
+      "pathname_pattern": "^\\/gateway\\/transact\\.dll$"
+    },
+    {
+      "id": "worldpay-hosted-payment-page-test",
+      "psp": "worldpay",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe",
+        "form"
+      ],
+      "origin": "https://secure-test.worldpay.com",
+      "path_pattern": "/wcc/{purchase,card}",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.worldpay.com/access/products/checkout/web",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:worldpay-hosted-payment-page-card",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "variant_unverified": "The implemented Worldpay adapter covers Access Checkout card sessions; Worldpay hosted payment pages under secure.worldpay.com/wcc post the card to Worldpay directly and are not admitted.",
+      "hostname_pattern": "^secure-test\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/wcc\\/(?:purchase|card)$"
+    },
+    {
+      "id": "rapyd-hosted-checkout-page-sandbox",
+      "psp": "rapyd",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://sandboxcheckout.rapyd.net",
+      "path_pattern": "/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.rapyd.net/en/hosted-checkout-page.html",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:rapyd-hosted-checkout-page",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^sandboxcheckout\\.rapyd\\.net$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "amadeus-checkout-sdk-script-pdt",
+      "psp": "amadeus_checkout",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://pdt.payment.amadeus.com",
+      "path_pattern": "/checkout/sdk/:version/sdk-{es5,es2015,es2022}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/7.1.0/sdk-es2022.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/manifest.json",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^pdt\\.payment\\.amadeus\\.com$",
+      "pathname_pattern": "^\\/checkout\\/sdk\\/[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\/sdk-es(?:5|2015|2022)\\.js$"
+    },
+    {
+      "id": "amadeus-checkout-sdk-script-uat",
+      "psp": "amadeus_checkout",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://uat.payment.amadeus.com",
+      "path_pattern": "/checkout/sdk/:version/sdk-{es5,es2015,es2022}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/7.1.0/sdk-es2022.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/manifest.json",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^uat\\.payment\\.amadeus\\.com$",
+      "pathname_pattern": "^\\/checkout\\/sdk\\/[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\/sdk-es(?:5|2015|2022)\\.js$"
+    },
+    {
+      "id": "amadeus-checkout-sdk-frame-pdt",
+      "psp": "amadeus_checkout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://pdt.payment.amadeus.com",
+      "path_pattern": "/checkout/sdk/:version/form-fields/{tunnel,pan,cvv}.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/7.1.0/form-fields/tunnel.html",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/outpaycelab/outpayce-checkout-sdk-web/blob/main/userguide.md",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^pdt\\.payment\\.amadeus\\.com$",
+      "pathname_pattern": "^\\/checkout\\/sdk\\/[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\/form-fields\\/(?:tunnel|pan|cvv)\\.html$"
+    },
+    {
+      "id": "amadeus-checkout-sdk-frame-uat",
+      "psp": "amadeus_checkout",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://uat.payment.amadeus.com",
+      "path_pattern": "/checkout/sdk/:version/form-fields/{tunnel,pan,cvv}.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://prd.payment.amadeus.com/checkout/sdk/7.1.0/form-fields/tunnel.html",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://github.com/outpaycelab/outpayce-checkout-sdk-web/blob/main/userguide.md",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^uat\\.payment\\.amadeus\\.com$",
+      "pathname_pattern": "^\\/checkout\\/sdk\\/[0-9]{1,3}\\.[0-9]{1,3}\\.[0-9]{1,3}\\/form-fields\\/(?:tunnel|pan|cvv)\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-us",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-us.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-us\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-au",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-au.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-au\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-apse",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-apse.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-apse\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-in",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-in.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
+          "reviewed_on": "2026-09-15"
+        },
+        {
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-in\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "adyen-secured-fields-live-nea",
+      "psp": "adyen",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://checkoutshopper-live-nea.adyen.com",
+      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
+          "reviewed_on": "2026-09-11"
         },
         {
           "kind": "primary_source",
@@ -2613,199 +4183,676 @@
           "reviewed_on": "2026-09-15"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
-          "reviewed_on": "2026-09-15"
+          "kind": "partner_observation",
+          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
+          "reviewed_on": "2026-09-15"
+        }
+      ],
+      "hostname_pattern": "^checkoutshopper-live-nea\\.adyen\\.com$",
+      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+    },
+    {
+      "id": "fiserv-commercehub-payment-fields-cert",
+      "psp": "fiserv",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://commercehub-checkout-cert.fiservapps.com",
+      "path_pattern": "/sdk/:version/payment-fields.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://orangepay-ecommerce.hdpayments.homedepot.com/env.js",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^commercehub-checkout-cert\\.fiservapps\\.com$",
+      "pathname_pattern": "^\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/payment-fields\\.js$"
+    },
+    {
+      "id": "fiserv-commercehub-checkout-script-cert",
+      "psp": "fiserv",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://commercehub-checkout-cert.fiservapps.com",
+      "path_pattern": "/sdk/:version/checkout.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://developer.fiserv.com/product/CommerceHub/docs/Online-Commerce/Integration-Options/Hosted-Checkout/Hosted-Checkout-Version-Release",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^commercehub-checkout-cert\\.fiservapps\\.com$",
+      "pathname_pattern": "^\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/checkout\\.js$"
+    },
+    {
+      "id": "fiserv-secure-data-capture-frame-cert",
+      "psp": "fiserv",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://commercehub-secure-data-capture-cert.fiservapps.com",
+      "path_pattern": "/sdk-secure/:version/iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://commercehub-secure-data-capture.fiservapps.com/sdk-secure/3.8.14/iframe.html",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "hostname_pattern": "^commercehub-secure-data-capture-cert\\.fiservapps\\.com$",
+      "pathname_pattern": "^\\/sdk-secure\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/iframe\\.html$"
+    },
+    {
+      "id": "verifone-secure-card-capture-script-emea",
+      "psp": "verifone",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://emea.jsclient.verifone.cloud",
+      "path_pattern": "/verifone.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://us.jsclient.verifone.cloud/verifone.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://verifone.cloud/docs/online-payments/securecardcapture",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^emea\\.jsclient\\.verifone\\.cloud$",
+      "pathname_pattern": "^\\/verifone\\.js$"
+    },
+    {
+      "id": "verifone-secure-card-capture-script-uscst",
+      "psp": "verifone",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://uscst.jsclient.vficloud.net",
+      "path_pattern": "/verifone.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://us.jsclient.verifone.cloud/verifone.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://verifone.cloud/docs/online-payments/securecardcapture",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^uscst\\.jsclient\\.vficloud\\.net$",
+      "pathname_pattern": "^\\/verifone\\.js$"
+    },
+    {
+      "id": "verifone-secure-card-capture-script-cst",
+      "psp": "verifone",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://cst.jsclient.vficloud.net",
+      "path_pattern": "/verifone.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://us.jsclient.verifone.cloud/verifone.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://verifone.cloud/docs/online-payments/securecardcapture",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^cst\\.jsclient\\.vficloud\\.net$",
+      "pathname_pattern": "^\\/verifone\\.js$"
+    },
+    {
+      "id": "juspay-hypercheckout-payment-page-sandbox",
+      "psp": "juspay",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://sandbox.juspay.in",
+      "path_pattern": "/orders/:order/payment-page",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://juspay.io/in/docs/api-reference/docs/express-checkout/session",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "The Juspay HyperCheckout payment page at /orders/:order/payment-page sends the card from Juspay's own page, a request the Vault does not take over.",
+      "hostname_pattern": "^sandbox\\.juspay\\.in$",
+      "pathname_pattern": "^\\/orders\\/ordeh_[A-Za-z0-9]+\\/payment-page$"
+    },
+    {
+      "id": "juspay-hypercheckout-payment-page-io",
+      "psp": "juspay",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://api.juspay.io",
+      "path_pattern": "/orders/:order/payment-page",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://juspay.io/in/docs/api-reference/docs/express-checkout/session",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "The Juspay HyperCheckout payment page at /orders/:order/payment-page sends the card from Juspay's own page, a request the Vault does not take over.",
+      "hostname_pattern": "^api\\.juspay\\.io$",
+      "pathname_pattern": "^\\/orders\\/ordeh_[A-Za-z0-9]+\\/payment-page$"
+    },
+    {
+      "id": "pelecard-payment-page-gateway20",
+      "psp": "pelecard",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://gateway20.pelecard.biz",
+      "path_pattern": "/PaymentGW",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://gateway21.pelecard.biz/ManualIframe/Chart",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.pelecard.com/documentation/iframe-redirect-programmer-manual-version-06-2025/",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^gateway20\\.pelecard\\.biz$",
+      "pathname_pattern": "^\\/PaymentGW\\/?$"
+    },
+    {
+      "id": "pelecard-payment-script-gateway20",
+      "psp": "pelecard",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://gateway20.pelecard.biz",
+      "path_pattern": "/Scripts/Payment/{Payment,General}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://gateway21.pelecard.biz/Scripts/Payment/Payment.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://gateway21.pelecard.biz/Scripts/Payment/General.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^gateway20\\.pelecard\\.biz$",
+      "pathname_pattern": "^\\/Scripts\\/Payment\\/(?:Payment|General)\\.js$"
+    },
+    {
+      "id": "aci-copyandpay-widget-script-oppwa",
+      "psp": "aci",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://oppwa.com",
+      "path_pattern": "/v1/paymentWidgets.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.aciworldwide.com/integration-guide",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/paymentWidgets\\.js$"
+    },
+    {
+      "id": "aci-copyandpay-widget-script-eu-test",
+      "psp": "aci",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://eu-test.oppwa.com",
+      "path_pattern": "/v1/paymentWidgets.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.aciworldwide.com/integration-guide",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "hostname_pattern": "^checkoutshopper-live-us\\.adyen\\.com$",
-      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+      "hostname_pattern": "^eu-test\\.oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/paymentWidgets\\.js$"
     },
     {
-      "id": "adyen-secured-fields-live-au",
-      "psp": "adyen",
+      "id": "aci-copyandpay-widget-script-test",
+      "psp": "aci",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://test.oppwa.com",
+      "path_pattern": "/v1/paymentWidgets.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.aciworldwide.com/integration-guide",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^test\\.oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/paymentWidgets\\.js$"
+    },
+    {
+      "id": "aci-copyandpay-card-frame-oppwa",
+      "psp": "aci",
       "kinds": [
         "frame",
         "iframe",
         "document"
       ],
-      "origin": "https://checkoutshopper-live-au.adyen.com",
-      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "origin": "https://oppwa.com",
+      "path_pattern": "/v1/pciIframe.html",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
-          "reviewed_on": "2026-09-11"
+          "reference": "https://eu-prod.oppwa.com/v1/pciIframe.html",
+          "reviewed_on": "2026-09-25"
         },
         {
           "kind": "primary_source",
-          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/pciIframe\\.html$"
+    },
+    {
+      "id": "aci-copyandpay-card-frame-eu-test",
+      "psp": "aci",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://eu-test.oppwa.com",
+      "path_pattern": "/v1/pciIframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://eu-prod.oppwa.com/v1/pciIframe.html",
+          "reviewed_on": "2026-09-25"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
-          "reviewed_on": "2026-09-15"
+          "kind": "primary_source",
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "hostname_pattern": "^checkoutshopper-live-au\\.adyen\\.com$",
-      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+      "hostname_pattern": "^eu-test\\.oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/pciIframe\\.html$"
     },
     {
-      "id": "adyen-secured-fields-live-apse",
-      "psp": "adyen",
+      "id": "aci-copyandpay-card-frame-test",
+      "psp": "aci",
       "kinds": [
         "frame",
         "iframe",
         "document"
       ],
-      "origin": "https://checkoutshopper-live-apse.adyen.com",
-      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "origin": "https://test.oppwa.com",
+      "path_pattern": "/v1/pciIframe.html",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
-          "reviewed_on": "2026-09-11"
+          "reference": "https://eu-prod.oppwa.com/v1/pciIframe.html",
+          "reviewed_on": "2026-09-25"
         },
         {
           "kind": "primary_source",
-          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://eu-prod.oppwa.com/v1/paymentWidgets.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^test\\.oppwa\\.com$",
+      "pathname_pattern": "^\\/v1\\/pciIframe\\.html$"
+    },
+    {
+      "id": "creditguard-pps-hosted-page-pps2",
+      "psp": "creditguard",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://pps2.creditguard.co.il",
+      "path_pattern": "/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://www.creditguard.co.il/wp-content/uploads/2021/10/CG-Gateway-Redirect-API-for-PPS.pdf",
+          "reviewed_on": "2026-09-25"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
-          "reviewed_on": "2026-09-15"
+          "kind": "primary_source",
+          "reference": "https://pps.creditguard.co.il/",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "hostname_pattern": "^checkoutshopper-live-apse\\.adyen\\.com$",
-      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+      "hostname_pattern": "^pps2\\.creditguard\\.co\\.il$",
+      "pathname_pattern": "^\\/$"
     },
     {
-      "id": "adyen-secured-fields-live-in",
-      "psp": "adyen",
+      "id": "creditguard-pps-template-script-pps2",
+      "psp": "creditguard",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://pps2.creditguard.co.il",
+      "path_pattern": "/templates/:template/main.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://pps.creditguard.co.il/templates/cgt-basic/main.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^pps2\\.creditguard\\.co\\.il$",
+      "pathname_pattern": "^\\/templates\\/[A-Za-z0-9_-]{1,64}\\/main\\.js$"
+    },
+    {
+      "id": "creditguard-pps-hosted-page-uat",
+      "psp": "creditguard",
       "kinds": [
+        "document",
         "frame",
-        "iframe",
-        "document"
+        "iframe"
       ],
-      "origin": "https://checkoutshopper-live-in.adyen.com",
-      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "origin": "https://ppsuat.creditguard.co.il",
+      "path_pattern": "/",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
-          "reviewed_on": "2026-09-11"
+          "reference": "https://www.creditguard.co.il/wp-content/uploads/2021/10/CG-Gateway-Redirect-API-for-PPS.pdf",
+          "reviewed_on": "2026-09-25"
         },
         {
           "kind": "primary_source",
-          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://pps.creditguard.co.il/",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^ppsuat\\.creditguard\\.co\\.il$",
+      "pathname_pattern": "^\\/$"
+    },
+    {
+      "id": "creditguard-pps-template-script-uat",
+      "psp": "creditguard",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://ppsuat.creditguard.co.il",
+      "path_pattern": "/templates/:template/main.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://pps.creditguard.co.il/templates/cgt-basic/main.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^ppsuat\\.creditguard\\.co\\.il$",
+      "pathname_pattern": "^\\/templates\\/[A-Za-z0-9_-]{1,64}\\/main\\.js$"
+    },
+    {
+      "id": "elavon-converge-hosted-payment-page-demo",
+      "psp": "elavon_converge",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://api.demo.convergepay.com",
+      "path_pattern": "/hosted-payments/",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/",
+          "reviewed_on": "2026-09-25"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
-          "reviewed_on": "2026-09-15"
+          "kind": "primary_source",
+          "reference": "https://developer.elavon.com/products/hosted-payment-page/v1/take-a-payment",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "hostname_pattern": "^checkoutshopper-live-in\\.adyen\\.com$",
-      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+      "hostname_pattern": "^api\\.demo\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/$"
     },
     {
-      "id": "adyen-secured-fields-live-nea",
-      "psp": "adyen",
+      "id": "elavon-converge-hpp-bundle-demo",
+      "psp": "elavon_converge",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://api.demo.convergepay.com",
+      "path_pattern": "/hosted-payments/assets/hpp-:version.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/assets/hpp-2.505.07.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "hostname_pattern": "^api\\.demo\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/assets\\/hpp-[0-9]+\\.[0-9]+\\.[0-9]+\\.js$"
+    },
+    {
+      "id": "elavon-converge-lightbox-demo",
+      "psp": "elavon_converge",
       "kinds": [
+        "document",
         "frame",
-        "iframe",
-        "document"
+        "iframe"
       ],
-      "origin": "https://checkoutshopper-live-nea.adyen.com",
-      "path_pattern": "^/checkoutshopper/securedfields/[^/]+/[0-9]+\\.[0-9]+\\.[0-9]+/securedFields\\.html$",
+      "origin": "https://api.demo.convergepay.com",
+      "path_pattern": "/hosted-payments/hpm",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/sdk/6.11.0/adyen.js",
-          "reviewed_on": "2026-09-11"
+          "reference": "https://api.demo.convergepay.com/hosted-payments/hpm",
+          "reviewed_on": "2026-09-25"
         },
         {
           "kind": "primary_source",
-          "reference": "https://docs.adyen.com/development-resources/live-endpoints/",
-          "reviewed_on": "2026-09-15"
+          "reference": "https://api.convergepay.com/hosted-payments/PayWithConverge.js",
+          "reviewed_on": "2026-09-25"
+        }
+      ],
+      "variant_unverified": "The implemented Elavon Converge adapter covers the Hosted Payment Page; the Lightbox payment modal at hosted-payments/hpm posts to its own endpoint and is not admitted.",
+      "hostname_pattern": "^api\\.demo\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/hpm\\/?$"
+    },
+    {
+      "id": "elavon-converge-checkout-js-demo",
+      "psp": "elavon_converge",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://api.demo.convergepay.com",
+      "path_pattern": "/hosted-payments/{Checkout,PayWithConverge}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/Checkout.js",
+          "reviewed_on": "2026-09-25"
         },
         {
-          "kind": "partner_observation",
-          "reference": "kernel-discovery-2026-09-14:adyen-secured-fields-4.9.0-live-us",
-          "reviewed_on": "2026-09-15"
+          "kind": "primary_source",
+          "reference": "https://api.convergepay.com/hosted-payments/PayWithConverge.js",
+          "reviewed_on": "2026-09-25"
         }
       ],
-      "hostname_pattern": "^checkoutshopper-live-nea\\.adyen\\.com$",
-      "pathname_pattern": "^\\/checkoutshopper\\/securedfields\\/[^/]+\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/securedFields\\.html$"
+      "variant_unverified": "The implemented Elavon Converge adapter covers the Hosted Payment Page; Checkout.js and the Lightbox launcher post the card from the merchant page and are not admitted.",
+      "hostname_pattern": "^api\\.demo\\.convergepay\\.com$",
+      "pathname_pattern": "^\\/hosted-payments\\/(?:Checkout|PayWithConverge)\\.js$"
     },
     {
-      "id": "fiserv-commercehub-payment-fields-cert",
-      "psp": "fiserv",
+      "id": "wspay-components-script-test",
+      "psp": "wspay",
       "kinds": [
         "script"
       ],
-      "origin": "https://commercehub-checkout-cert.fiservapps.com",
-      "path_pattern": "/sdk/:version/payment-fields.js",
+      "origin": "https://proxy-test.wspay.biz",
+      "path_pattern": "/dist/{components,monri}.js",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js",
+          "reference": "https://proxy.wspay.biz/dist/components.js",
           "reviewed_on": "2026-09-23"
         },
         {
           "kind": "primary_source",
-          "reference": "https://orangepay-ecommerce.hdpayments.homedepot.com/env.js",
+          "reference": "https://proxy.wspay.biz/dist/monri.js",
           "reviewed_on": "2026-09-23"
         }
       ],
-      "hostname_pattern": "^commercehub-checkout-cert\\.fiservapps\\.com$",
-      "pathname_pattern": "^\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/payment-fields\\.js$"
+      "hostname_pattern": "^proxy-test\\.wspay\\.biz$",
+      "pathname_pattern": "^\\/dist\\/(?:components|monri)\\.js$"
     },
     {
-      "id": "fiserv-commercehub-checkout-script-cert",
-      "psp": "fiserv",
+      "id": "wspay-components-card-frame-test",
+      "psp": "wspay",
       "kinds": [
-        "script"
+        "frame",
+        "iframe",
+        "document"
       ],
-      "origin": "https://commercehub-checkout-cert.fiservapps.com",
-      "path_pattern": "/sdk/:version/checkout.js",
+      "origin": "https://proxy-test.wspay.biz",
+      "path_pattern": "/v2/js/payment-method-component-dynamic.html",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://developer.fiserv.com/product/CommerceHub/docs/Online-Commerce/Integration-Options/Hosted-Checkout/Hosted-Checkout-Version-Release",
+          "reference": "https://proxy.wspay.biz/dist/components.js",
+          "reviewed_on": "2026-09-23"
+        },
+        {
+          "kind": "primary_source",
+          "reference": "https://proxy.wspay.biz/v2/js/payment-method-component-dynamic.html",
           "reviewed_on": "2026-09-23"
         }
       ],
-      "hostname_pattern": "^commercehub-checkout-cert\\.fiservapps\\.com$",
-      "pathname_pattern": "^\\/sdk\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/checkout\\.js$"
+      "hostname_pattern": "^proxy-test\\.wspay\\.biz$",
+      "pathname_pattern": "^\\/v2\\/js\\/payment-method-component-dynamic\\.html$"
     },
     {
-      "id": "fiserv-secure-data-capture-frame-cert",
-      "psp": "fiserv",
+      "id": "wspay-form-hosted-page-test",
+      "psp": "wspay",
       "kinds": [
+        "document",
         "frame",
         "iframe",
-        "document"
+        "form"
       ],
-      "origin": "https://commercehub-secure-data-capture-cert.fiservapps.com",
-      "path_pattern": "/sdk-secure/:version/iframe.html",
+      "origin": "https://formtest.wspay.biz",
+      "path_pattern": "/authorization{,.aspx}",
       "sources": [
         {
           "kind": "primary_source",
-          "reference": "https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js",
+          "reference": "https://docs.wspay.info/wspayform",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "The implemented WSPay adapter covers the WSPay Components card confirm on proxy.wspay.biz; the WSPay Form hosted page posts the card to form.wspay.biz and is not admitted.",
+      "hostname_pattern": "^formtest\\.wspay\\.biz$",
+      "pathname_pattern": "^\\/authorization(?:\\.aspx)?$"
+    },
+    {
+      "id": "monri-components-script-test",
+      "psp": "monri",
+      "kinds": [
+        "script"
+      ],
+      "origin": "https://ipgtest.monri.com",
+      "path_pattern": "/dist/{components,monri}.js",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://ipg.monri.com/en/documentation/components",
           "reviewed_on": "2026-09-23"
         },
         {
           "kind": "primary_source",
-          "reference": "https://commercehub-secure-data-capture.fiservapps.com/sdk-secure/3.8.14/iframe.html",
+          "reference": "https://ipg.monri.com/dist/components.js",
           "reviewed_on": "2026-09-23"
         }
       ],
-      "hostname_pattern": "^commercehub-secure-data-capture-cert\\.fiservapps\\.com$",
-      "pathname_pattern": "^\\/sdk-secure\\/[0-9]+\\.[0-9]+\\.[0-9]+\\/iframe\\.html$"
+      "variant_unverified": "Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.",
+      "hostname_pattern": "^ipgtest\\.monri\\.com$",
+      "pathname_pattern": "^\\/dist\\/(?:components|monri)\\.js$"
+    },
+    {
+      "id": "monri-components-card-frame-test",
+      "psp": "monri",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://ipgtest.monri.com",
+      "path_pattern": "/v2/js/payment-{method-component-dynamic,component}.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://ipg.monri.com/dist/components.js",
+          "reviewed_on": "2026-09-23"
+        }
+      ],
+      "variant_unverified": "Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.",
+      "hostname_pattern": "^ipgtest\\.monri\\.com$",
+      "pathname_pattern": "^\\/v2\\/js\\/payment-(?:method-component-dynamic|component)\\.html$"
     }
   ],
   "processors": [