What must be proven
This room describes concrete readiness proof and stop signals before live payments.
- • STRIPE_SECRET_KEY
- • STRIPE_WEBHOOK_SECRET
- • NEXT_PUBLIC_SITE_URL
- • RESEND_API_KEY
checkout delivery
Environment gate
Which env vars must exist before live-payment drill.
Verify the full path from product to delivered result, not one pretty page.
Operator check
The check passes only when webhook, unlock, delivery, archive, support, and deletion dry run line up.
- • Do not trust Stripe redirect alone.
- • Do not send the full answer in email preview.
- • Do not store public share as private artifact.
- • Do not start ads before test order signoff.
related