Skip to content

RelayPay v0.10.0 — Cloudflare edge trust boundary

Choose a tag to compare

@marsh15 marsh15 released this 01 Aug 14:47
· 35 commits to main since this release
f9330ae

RelayPay v0.10.0

RelayPay v0.10.0 adds a locally reproducible Cloudflare edge trust boundary while keeping
PostgreSQL and the origin payment core authoritative.

Included

  • Worker validation for API-key shape, request bounds, replay windows, and tenant rate limits;
  • a SQLite-backed Durable Object used only for per-tenant edge coordination;
  • signed synchronous origin requests with W3C trace-context continuity;
  • digest-addressed R2 archival and Queue-only forwarding for validated inbound webhook bytes;
  • explicit Queue acknowledgement/redelivery, origin-outage handling, and edge metrics;
  • Wrangler-compatible local and CI gates with no public deployment.

Compatibility and safety

The merchant /api/v1, Python SDK, financial journals, immutable evidence, and idempotent
response bytes are unchanged. Cloudflare state may be lost or duplicated without changing
business truth. See the migration guide before enabling origin signature enforcement.

Synthetic data only. RelayPay is not a payment processor. Never submit real payment,
bank-account, identity, or customer data.