- Replay protection for payment payloads
- Idempotency enforcement for verify and settle operations
- Optional bearer auth for protected deployments
- Settlement lifecycle tracking and reconciliation support
- Signer isolation with external signer interfaces
- KMS/HSM-compatible key management direction