mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zeekayandHanzo Dev
3642171452
The audit's punch list on a single page: what the three guides provide, then the seven asks in order — access, onboarding, accounts (individual and corporate), payments, cards, webhooks, crypto sandbox. FX and crypto conversion explicitly not requested. Co-authored-by: Hanzo Dev <[email protected]>
69 lines
2.8 KiB
TeX
69 lines
2.8 KiB
TeX
\documentclass[10pt]{article}
|
|
\usepackage[margin=2.1cm]{geometry}
|
|
\usepackage{booktabs, enumitem, hyperref}
|
|
\hypersetup{hidelinks}
|
|
\pagestyle{empty}
|
|
\setlength{\parindent}{0pt}
|
|
\setlength{\parskip}{4pt}
|
|
|
|
\newcommand{\ep}[1]{\texttt{\small #1}}
|
|
|
|
\begin{document}
|
|
|
|
{\LARGE\bfseries SF Private Bank --- Outstanding API Requests}\par
|
|
{\small Lux Industries, Inc. \; · \; one-page summary of the full
|
|
audit (\emph{Platform API Audit: Received Surface and Required
|
|
APIs}, 2026)}
|
|
|
|
\vspace{6pt}\hrule\vspace{8pt}
|
|
|
|
\textbf{Received to date.} Three integration guides: \emph{Account
|
|
Management} (card account for natural persons, KYC status),
|
|
\emph{Virtual Cards} (KYC/consent lifecycle, hosted URLs), and
|
|
\emph{Crypto Service} (custodial wallets, sends, swaps --- production
|
|
host \ep{crypto-v1-api-rdqehkur6a-ey.a.run.app}, production-only).
|
|
No other base URL, no authentication scheme, no API Reference, and no
|
|
credentials have been issued.
|
|
|
|
\textbf{Still needed, in order:}
|
|
|
|
\begin{enumerate}[leftmargin=1.4em, itemsep=3pt]
|
|
\item \textbf{Access.} Sandbox \emph{and} production base URLs for
|
|
every service; the full API Reference the guides cite; the
|
|
authentication scheme; sandbox credentials.
|
|
\item \textbf{Onboarding.} User provisioning
|
|
(\ep{POST /user} --- the user both card guides presuppose) and
|
|
server-to-server identity document submission (identity document,
|
|
proof of address, liveness; KYB for entities), with KYC decision
|
|
webhooks.
|
|
\item \textbf{Accounts.} Ewallet and IBAN account opening for
|
|
individuals \emph{and corporates} --- the received
|
|
\ep{POST /account/:userId} accepts natural-person fields only ---
|
|
returning account details (IBAN/BIC), with balances and
|
|
transaction history.
|
|
\item \textbf{Payments.} Beneficiary registration; domestic ACH and
|
|
SWIFT/Fedwire origination with status lifecycle and settlement
|
|
webhooks; P2P and ewallet\,$\leftrightarrow$\,bank transfers.
|
|
\item \textbf{Cards.} The single-card order endpoint the Virtual
|
|
Cards guide references (path unspecified); physical card orders
|
|
(plastic, metal); activation; load; lock/unlock; real-time
|
|
authorization and transaction webhooks.
|
|
\item \textbf{Webhooks.} The delivery contract --- signed payloads,
|
|
the complete event catalog, replay by event id. Reconciliation and
|
|
fee reports to follow.
|
|
\item \textbf{Crypto.} The Crypto Service authentication scheme and a
|
|
testnet-backed sandbox (the service errors outside production
|
|
today).
|
|
\end{enumerate}
|
|
|
|
\vspace{2pt}\hrule\vspace{6pt}
|
|
|
|
{\small With items 1--3, accounts open --- individual and corporate.
|
|
With 4, money moves. With 5--7, the complete program operates at
|
|
production quality. \emph{Not requested:} FX and crypto conversion
|
|
--- we execute both ourselves and settle plain fiat over the standard
|
|
rails. Where a shorthand helps, the Wise Platform API is the
|
|
reference shape for each item.}
|
|
|
|
\end{document}
|