RelayPay v1.0.0 — Integrated Platform Release

RelayPay v1.0.0 — Integrated Platform Release

RelayPay v1.0.0 completes the integrated platform: every workflow from payment authorization to
merchant risk review now reports into one cross-workflow PostgreSQL analytics model, is verified by
one versioned deterministic evaluation suite wired into the release gate, and is demonstrated by
one runnable synthetic portfolio journey — with /api/v1, every immutable journal, and every
earlier lost-response guarantee preserved exactly as shipped.

Highlights:

• cross-workflow portfolio analytics computed purely in PostgreSQL: dispute package completion,
  evidence-retrieval precision from immutable draft versions, recovery rate and recovered INR,
  versioned analyst handling-time baselines, analyst intervention rate, invalid and policy-blocked
  action rate, workflow and model p50/p95 latency, model micro-USD cost per completed workflow,
  and raw plus approval-adjusted completion rates;
• six new low-cardinality relaypay_portfolio_* Prometheus gauges with a portfolio section in the
  Grafana operations dashboard; tenant and environment dimensions stay in PostgreSQL and are never
  Prometheus labels;
• a new admin endpoint GET /api/admin/v1/environments/{env}/analytics/portfolio
  (technical:read permission) served from the same analytics module;
• business events for risk-review escalations and completions, recovery-case closure, and approval
  decisions join the existing outbox stream; model invocations remain authoritatively recorded in
  model_invocations rows;
• a versioned evaluation dataset — 30 dispute, 30 recovery, 24 settlement (all four intents plus
  clarifications), 30 merchant-risk, and 20 adversarial cases — with a deterministic runner that
  replays the fixtures through the real domain services and asserts ≥0.90 evidence-retrieval
  precision and zero policy, numeric, citation, escalation, tenant, PII, injection, or
  duplicate-effect violations; the gate now runs in CI and records EvaluationDataset and
  EvaluationRun rows;
• provider-resilience proofs extended with router fallback-exhaustion and terminal-error
  no-fallback unit tests alongside the existing Redis-loss, Redpanda redelivery, Celery loss,
  worker shutdown, lease-reclaim, provider-outage, DLQ, approval-waiting, PII, injection, and
  tenant-isolation coverage;
• a release-only live-provider comparison script (scripts/compare_live_providers.py) that scores
  the settlement classifier across OpenAI, Claude, and Gemini when API keys are configured; it is
  intentionally not a CI gate;
• make portfolio-demo: one runnable end-to-end synthetic journey — payment authorization and
  capture through the deterministic provider, settlement question, recovery case, dispute draft,
  risk review, and the portfolio analytics summary;
• updated architecture documentation, ADR-010, threat model, limitations, operations guides,
  migration notes, and SDK/OpenAPI contract regeneration.

This is synthetic INR portfolio software. It handles no real money, identity, merchant, banking,
or website data. Every merchant site, dispute, recovery case, and evaluation fixture is a
deterministic synthetic artifact. No deployment or hosting is included.