Contribution records credited to Bordeaux Metropole

Kessai Payment Engine

• Let the metrics job fail when the page is stale, and refresh a page 166 files behind the tree
  Sun, 09/20/2026 - 17:27
• The status report warning kessai_server added is the only thing it says that is not in French, and the guard against that does not read PHP
  Sun, 09/20/2026 - 07:41
• Every door that answers with a list of payments reads their metadata one payment at a time
  Sun, 09/20/2026 - 07:22
• A site value stored where a payment may not go is answered as nowhere rather than as nothing stored, so a consumer with one good origin is told nothing
  Sat, 09/19/2026 - 23:09
• The caption the listings hide holds the one control on the page a keyboard user can reach and nobody can see
  Sat, 09/19/2026 - 22:20
• Refusals on the open endpoints are logged once per request, and collapsing them by caller alone silences every refusal after the first
  Sat, 09/19/2026 - 21:30
• Request limits warn about the state most sites should be in, say nothing about the state that is wrong, and name the settings page without linking it
  Sat, 09/19/2026 - 17:41
• Two methods renamed to get() for beginning with a verb now say nothing about what they answer
  Sat, 09/19/2026 - 17:02
• Columns that can only hold a machine name are stored as if they could hold any character
  Sat, 09/19/2026 - 16:33
• The return address is the one API field read before the reader that refuses it, and the origins it is checked against are trusted exactly as stored
  Sat, 09/19/2026 - 15:34
• Gin cuts a toolbar icon out of a mask, so the Payments item is the empty square the stylesheet exists to prevent
  Sat, 09/19/2026 - 15:21
• A signed notification is acted on for an account it was not signed for, at the Worldline webhook and at the client's notice route
  Sat, 09/19/2026 - 12:58
• Every door that sends a payer home reads a different half of where home is, and the guard they all share raises on the payer's critical path
  Sat, 09/19/2026 - 10:43
• The account form names the wrong thing as what a payment records, and the bundled gateway types against the wrong half of the pair
  Sat, 09/19/2026 - 08:29
• Two of the five modules that log write to a channel of their own, so one payment's story is split across three
  Sat, 09/19/2026 - 07:30
• A metadata value that is empty is remembered as nothing and found by nothing, and what the wire cannot read it drops or casts without saying so
  Fri, 09/18/2026 - 22:56
• A payer taken for another site is never sent home: two doors never ask, no door can carry them, and a link can erase the address
  Fri, 09/18/2026 - 21:34
• A payment another host settled is named in the chain by an id only its own host issues
  Fri, 09/18/2026 - 09:14
• The event says money moved but not which movement moved it, so a subscriber has to ask a service that may not hold the payment
  Fri, 09/18/2026 - 08:37
• The column that says whose payment it is cannot hold every client id, and nothing indexes it
  Thu, 09/17/2026 - 22:23
• Changing a consumer's client id orphans every payment that names it, though deleting it for the same reason is refused
  Thu, 09/17/2026 - 21:58
• One payment nothing can route stops the whole batch when a client site forgets its stored cards
  Thu, 09/17/2026 - 21:19
• The two doors that charge a stored card do not bound what a caller asks to be remembered
  Thu, 09/17/2026 - 20:42
• A remote or payment account whose id is 'add' or 'settings' cannot be edited: the static route answers first
  Thu, 09/17/2026 - 17:59
• Four French catalogues are missing the strings the last releases added, and nothing notices when one drifts
  Thu, 09/17/2026 - 12:58
• Nothing in the administration links to the remote payment accounts, and a client that reaches none says so nowhere
  Thu, 09/17/2026 - 11:48
• What a consumer remembered outlives its payment, and an amount the column cannot hold reaches the database
  Thu, 09/17/2026 - 09:09
• getLatestMovement() answers with the oldest movement when the payments are held by a Kessai elsewhere
  Thu, 09/17/2026 - 08:13
• Nothing retires a notice-signing secret: not deleting the consumer, not renaming it, not uninstalling the module
  Thu, 09/17/2026 - 07:52
• A later hold or charge reaches for a stored card belonging to another consumer’s payer
  Thu, 09/17/2026 - 07:14
• Group the request limits with the switch that turns them on, and say what they limit in plain words
  Wed, 09/16/2026 - 21:38
• Put the request-limit switch on the form that owns the limits, not in another section
  Wed, 09/16/2026 - 18:31
• Nothing bounds what a stranger can ask of an endpoint; rate-limit them, and allowlist where the caller is known
  Wed, 09/16/2026 - 15:10
• The deletion refusals only hold on the form; back them with a predelete hook
  Wed, 09/16/2026 - 12:19
• Refuse to delete what is still depended on, and let disabling a consumer mean something
  Wed, 09/16/2026 - 10:33
• Name a payment account by its uuid, and call it an account
  Wed, 09/16/2026 - 08:45
• Take payments through a kessai on another host: an OAuth API and a remote client
  Tue, 09/15/2026 - 20:49
• Let a consumer drive payments holding only the contract
  Tue, 09/15/2026 - 09:38
• Give the consumer's contract a module of its own, so a site can hold it without an engine
  Mon, 09/14/2026 - 18:34
• Collect a gateway's settings when an account is added, and refuse to uninstall a gateway module while accounts are held at it
  Mon, 09/14/2026 - 10:08
• Anchor a later hold or charge on the payment account's own checkout, not on one named after the plugin
  Mon, 09/14/2026 - 07:30
• Offer the add link on the payment accounts listing, and say what an account is for when there are none
  Sun, 09/13/2026 - 22:28
• Hide the repeated caption and column list on the four listing screens
  Sun, 09/13/2026 - 21:21
• Give the Payments section an icon, and move it to the front of the toolbar
  Sun, 09/13/2026 - 20:42
• Give payments an admin section of their own, and call a gateway instance a payment account
  Sun, 09/13/2026 - 16:44
• Let a site hold two accounts at one provider: configured gateway instances, not bare plugin ids
  Sun, 09/13/2026 - 12:50
• Write a payment's provider session against its locked row, and fix what the full audit found untranslated, stale and still calling a token a card
  Sat, 09/12/2026 - 20:33
• The classes holding the payment client still call it a manager
  Sat, 09/12/2026 - 15:31
• Write every change to a payment against its locked row, take the card out of the engine's vocabulary, and shape the public API by audience
  Sat, 09/12/2026 - 13:26
• Settle a payment and open its session once when two callers arrive together, create one payment per subject and kind, and take the provider's word out of the engine's vocabulary
  Fri, 09/11/2026 - 15:53