Support center

Merchant support intake must use request IDs and redacted context. Ticket submission is blocked until a production support workflow is connected.

Support intake blocked

The public route does not render a fake ticket form or submission state before an approved support backend exists.

Fail closed

Collect support details only through approved production channels; do not attach secrets, card secrets or raw provider payloads.

Common questions link back into contract-backed docs and authenticated dashboard areas.

Review key reuse behavior.

Inspect retry and DLQ semantics.

Rotate keys without revealing stored secrets.