0.6.0 - Wave 2 gateways

Wave 2 general providers.

Providers

• New adapters with limited support, built from official documentation and tested with synthetic fixtures:
  • Worldpay (Access Worldpay JSON): Events webhooks, Payments API and Card Payments v7 responses, errorName errors and Payment Queries. Refusal codes are decoded with the Worldpay or raw scheme reading the payload supports.
  • Cybersource: REST Payments API responses and errors, the webhook envelope, Transaction Details and Pay by Bank payloads.
  • Authorize.net: JSON transaction responses with the API and transaction result layers decoded separately, and webhooks.
  • Nuvei: REST API 1.0 responses, payment and withdrawal DMNs and chargeback events, with codes decoded by field.
• 30 of 42 roadmap providers can now be analyzed.

Fixed

• MISSING_REFERENCE no longer reports events that share a correlation group with other events, for example events linked by a transaction or root id instead of a payment id (rule catalog 2026.10.4).

Security

• Redaction now covers Authorize.net card, track, credential and verification fields (cardCode, expirationDate, track1, track2, tlvData, dataValue, cardholderAuthenticationValue, transactionKey, nameOnAccount, customerIP, PayerEmail, SecureAcceptanceUrl, transHash, transHashSha2).