https://shipreadyai.dev/learn/verify/payments

> Discover all available pages from the documentation index at https://shipreadyai.dev/llms.txt

# Payment handling

Whether payment events are verified, replay safe, and matched to the right customer record.

## Why a check from outside cannot see it

Payment handling lives in a webhook endpoint that only your provider is supposed to call. Reaching it from outside would mean forging a request, which is exactly what should fail.

## How to check it yourself

1. Take a real payment event from your provider's dashboard.
2. Replay it twice to your endpoint.
3. Check the customer has exactly one entitlement and one record, then remove the signature and confirm the second attempt is refused.

## What a Launch Review does instead

A reviewer replays a payment event twice and confirms the customer is granted access exactly once.
