epic: PayBridge production-readiness audit and remediation roadmap

[teesofttech]

Audit baseline — 17 July 2026

What is working

• Release build completes on .NET 8.
• Unit suite passes: 90 passed, 2 sandbox tests skipped.
• Fifteen gateway types are present.
• Shared HTTP test infrastructure, PeachPayments coverage, CI, NuGet publishing, an example API, and PR Fix PayBridge gateway registration #56 registration fixes are in place.

Release blockers

• security: rotate exposed payment credentials and purge them from repository history #60 Rotate and remove committed credentials.
• security: upgrade high-severity vulnerable transitive dependencies and enable Dependabot alerts #59 Patch high-severity vulnerable dependencies.
• ci: fail nightly integration workflow when zero sandbox tests execute #58 Stop false-green integration CI runs.
• security: verify provider webhook signatures before parsing or fulfilling payments #61 Verify webhook signatures.
• demo-ui: keep sandbox credentials server-side and add safe environment controls #88 Apply server-side secret controls before any public provider UI.

Stabilization track

Issues #57 and #62 through #76 cover missing refund behavior, webhook detection, refund accounting, idempotency, routing, startup validation, HttpClient resilience, errors, warnings, repository controls, coverage, and package verification.

Product tracks

• Documentation and GitHub Pages: epic: launch a versioned PayBridge documentation site on GitHub Pages #77
• Secure provider test console: epic: build a secure provider test console for the PayBridge example app #86
• Gateway prioritization and expansion: research: score and sequence the next payment gateway integrations #93
• Gateway capability architecture: architecture: define gateway capabilities before adding more providers #90
• Provider contract test suite: test: create provider contract tests and versioned response fixture corpus #75

Existing backlog triage

Issues #4 through #8 describe gateways already present in code and now carry status: needs-triage. Issues #36 through #49 remain the provider test backlog. PR #56 is open, passing CI, and still has actionable review feedback about invalid EnabledGateways values and test/documentation completeness.

Completion criteria

• All P0 issues are closed with evidence.
• PR Fix PayBridge gateway registration #56 is updated and merged or superseded.
• Release build is warning-free and dependency scan is clean.
• Integration CI executes at least one real sandbox flow.
• Gateway capability matrix distinguishes implemented from sandbox-verified support.
• GitHub Pages documentation is live.
• Provider test console is secure by design and has deterministic E2E coverage.
• The next provider sequence is approved from a scored roadmap.