How Neo connects to outside companies

Adapter inventory

Exact-target certification

Certification binds a capability to the exact environment, provider, adapter version, credential-rotation label, callback URL, time window, and reviewed checks. Runs, checks, and revocations are immutable. Missing, expired, revoked, mismatched, or failed evidence blocks new external side effects while leaving callbacks, status reads, reconciliation, and cleanup available.

Deterministic tests prove the gate. They cannot certify a deployment. A provider API read or a successful sandbox flow is not certification.

Feature gates

• AUTOMATED_COMMERCE_WRITES_ENABLED controls consequential automated commerce writes.
• PAYOUT_TRANSFERS_ENABLED independently controls payout delivery.
• PAYMENT_REFUNDS_ENABLED independently controls provider refund delivery.
• Delivery modes select direct or durable outbox behavior; production automated writes require outbox.
• Closed-beta provider writes are phone scoped and do not waive certification for public launch.
• Unresolved critical financial reconciliation blocks payout queueing and delivery.

Public and private evidence

Public health exposes capability, provider, whether certification is required, validity, and expiry only. It does not expose credential labels, evidence payloads, provider references, private callback details, or internal deployment identifiers.

The repository-only certification runbook contains controlled drill requirements. Operators must keep credentials and evidence in protected storage and avoid real customer data.

• src/provider-certification.ts
• src/provider-canary.ts
• docs/PROVIDER_CERTIFICATION.md
• test/provider-certification.test.ts
• test/provider-canary.test.ts