name	secure-payment-review
description	Reviews payment and checkout code for PCI-sensitive data handling, idempotency, and Meridian Money-type usage. Use when reviewing changes to payment routing, checkout, or fraud-review code.

Secure payment review

When reviewing payment or checkout code:

Money type — confirm all currency math uses the Meridian Money value object; flag raw float/decimal arithmetic on monetary values.
Idempotency — confirm retries are keyed by paymentAttemptId.
Data handling — flag any log, trace, or persistence of PAN/CVV/track data.
Tool trust — confirm external calls use declared MCP servers only.

Output a table of findings with severity and a file:line reference.

name	secure-payment-review
description	Reviews payment and checkout code for PCI-sensitive data handling, idempotency, and Meridian Money-type usage. Use when reviewing changes to payment routing, checkout, or fraud-review code.

When reviewing payment or checkout code:

Money type — confirm all currency math uses the Meridian Money value object; flag raw float/decimal arithmetic on monetary values.
Idempotency — confirm retries are keyed by paymentAttemptId.
Data handling — flag any log, trace, or persistence of PAN/CVV/track data.
Tool trust — confirm external calls use declared MCP servers only.

Output a table of findings with severity and a file:line reference.

secure-payment-review