RelayPay v0.15.0 — Merchant Risk Review Agent

RelayPay v0.15.0 — Merchant Risk Review Agent

RelayPay v0.15.0 adds a deterministic merchant onboarding risk review agent on the shared
PostgreSQL-authoritative runtime while preserving /api/v1 and every earlier lost-response
guarantee.

Highlights:

• a synthetic merchant-site mock service with immutable, code-defined snapshots only — HTML,
  catalogue, refund and privacy policies, contact details, WHOIS-like domain data, pricing, and
  claims; no live crawling and no uploaded real merchant evidence;
• deterministic checks for website/contact/policy completeness, identity consistency, domain age,
  pricing outliers, and merchant category;
• a bounded model role that returns structured suspicious-language and claim findings with exact
  verbatim quotes and source paths; invented quotes, unknown classifications, scores, SQL, and
  mutations are rejected;
• immutable onboarding snapshots, risk reviews, review versions, findings, score breakdowns, and
  escalation records;
• a versioned 0–100 risk score where completeness contributes 0–20, domain identity and age 0–20,
  category and content 0–30, pricing 0–15, and suspicious claims 0–15;
• severity bands LOW 0–29, MEDIUM 30–59, HIGH 60–79, and CRITICAL 80–100;
• hard-stop escalation for prohibited-category, impersonation, counterfeit, and guaranteed-return
  findings regardless of score, and severity escalation for HIGH and CRITICAL otherwise;
• HIGH confidence for deterministic evidence or two-source corroboration, MEDIUM for one direct
  source, LOW for model-only interpretation, with LOW-confidence findings never hard-stopping
  alone;
• reviewer annotations and escalation dispositions that never rewrite immutable evidence,
  findings, or scores;
• admin APIs, generated SDK models, a console risk workspace, seeded synthetic reviews, migration
  and release notes, and browser coverage with accessibility checks.

This is synthetic INR portfolio software. It handles no real money, identity, merchant, banking,
or website data. Every merchant site is a deterministic synthetic fixture. No deployment or
hosting is included.