202 evidence only

Real callback endpoint contract

Receive partner callbacks without trusting them too early.

The callback URL stores masked/hash evidence and sends every result to reconciliation before ledger or wallet truth.

0

Intakes

0

Matched

0

Payouts

Current status

Callback endpoint contract not loaded yet.

1. Endpoint readiness

Open URL, closed financial truth.

Endpoint

/api/partner/upaisa/callback

Runtime

blocked

Secret

0/1

Allowlist

not set

2. Sample callback

Test the real URL safely.

3. Latest intake

What the endpoint actually stored.

No callback endpoint intake yet.

Endpoint locks

Callback does not equal money.

The endpoint returns 202 because it accepts evidence for review, not because it confirms payment or payout success.

Raw callback body and provider secrets are not stored in the preview store; only payload hash, masked reference, and safe statuses are stored.

Even matched and signed callbacks still need reconciliation, exception review, settlement ledger approval, and licensed adapter approval.

No order status, wallet balance, ledger, refund, settlement, bank transfer, or provider retry is mutated from this endpoint.

SecurityRuntimeChain spine