Ownership and runbook
Owner: Platform Security. Runbook: RB-API-SECURITY-OPS-001. These pages describe controls and operating rhythms; public documentation never grants or revokes access by itself.
Developer preview API v1
Sandbox only. No real funds moved. No production access is granted here. Access requirements
Public guidance
Run credentials, approvals, and changes under control
Bounded guidance for clients and scopes, grants, sandbox enablement, rotation, revocation, compromise, versioning, and migration from API keys.
Scope
Cover clients and scopes, approval and grants, sandbox and enablement, rotation and revocation, compromise and redress, versioning and deprecation, and migration from API keys.
Credentials are never shown
Prohibited credential shapes are described generically rather than printed. Store every credential in the approved secret manager and keep real or sample keys out of documentation, logs, and code.
Access stays explicit
Activation requires independent approval for the exact developer app, tenant, aggregator programme, country cell, and provider set. Production access is not granted by documentation.