Roadmap and status

1. Now

   Works on devnet
   • x402 payments on Solana devnet, test tokens only
   • One ledger, one status per payment, with Reverted if a captured payment disappears from the network
   • Fail-closed settlement, and a repeated payment settles once
   • Network fees paid by a Payzilla-run account, signed with a managed key service on devnet
   • A private hosted staging environment on AWS: the API runs behind Cloudflare on a managed PostgreSQL database, with the network-fee key in AWS KMS. Three staging test payments have finalized end to end
   • A live demo, at its own address and private for now: a demo agent makes a real test-token payment on devnet while you watch, or you pay with your own Phantom or Solflare wallet on devnet, with a human check, one run at a time and daily limits
   • First reconciliation checks on private staging: captured payments are confirmed to still exist on the network, stuck payments are flagged and the ledger’s balance rules are re-checked on a schedule
   • A read-only dashboard prototype that shows devnet payments, timelines and ledger entries
   • The card flow, tested end to end on a mock card provider, including refunds, disputes and settlement-file checks
   • Several rounds of internal adversarial review. No external audit yet

2. Next

   In development
   • Wallet ownership proof in the API and the dashboard
   • Routing rules you can edit
   • More dashboard screens: routing rules, wallets and gas
   • A per-seller choice of who pays the network fee
   • Opening the staging environment to trusted testers, and hardening it further
   • The full reconciliation job, and opening the demo to the public

3. Later

   Planned, no dates
   • A public hosted preview and packaged developer documentation
   • Real card provider connectors, after the first provider is chosen
   • ACP, AP2 and UCP agent protocols
   • EVM chains
   • Refunds and non-delivery claims for x402
   • Off-ramp through licensed partners
   • Real money only after the money path is reviewed (see the road to real money below)

The road to real money

Real-money payments start only after the checks below are done. There is no date. This list changes as items move, and it is a checklist of what has to be true, not a promise of a launch.

• Network-fee key in a managed key service

  In use on staging

  The key that pays network fees is held in AWS KMS on private staging. A final review before real money is still to do.

• Reconciliation with the network

  In progress

  Most checks run on private staging: captured payments are confirmed to still exist on the network, stuck payments are flagged, the use of the network-fee key is compared with our records, and the ledger’s balance rules are re-checked on a schedule. A few checks are still to finish.

• Long-run testing on a test network

  In progress

  A seven-day run on devnet is under way. A scripted payment runs on a schedule and reconciliation has to stay clean. The run restarts whenever the payment path changes.

• Test and live kept apart

  Planned

  Separate environments for test and real money, so one cannot reach the other. A plan is written, using a separate account for real money. Nothing is built yet.

• Per-seller limits and caps

  Built and tested

  Limits for each seller on payment size, daily volume, unfinalized exposure and daily network fees run on private staging with test values. Conservative starting values for real money are chosen but not applied. Who pays the network fee is still one shared account.

• Screening of addresses

  In progress

  A daily sync of a public sanctions list runs on staging. The list holds very few Solana addresses, so it is a baseline, not coverage. A commercial screening provider has not been chosen.

• Independent reviews

  Not started

  An outside review of settlement and the ledger, and an independent legal review. Several internal reviews are done, including a pre-launch round on the newest code whose findings are fixed or tracked. There is no external audit yet.

• Running it day to day

  Partly

  Alarms, a runbook for reconciliation breaks and a freeze switch for the signer exist on staging. On-call, a status page and tested backup restores are still to do.

• Billing for the pilot

  Manual path

  Pilot invoices would be prepared by hand from payment records. There is no automated metering or billing portal yet.

What is not here yet

• The preview is not a public service. A private staging environment exists, we switch it on when we test, and access is arranged by email.
• No real card provider is connected. Card flows run against a mock provider.
• There is no external audit yet.
• There is no real money. Devnet and test tokens only.

See how a payment works, the developer reference, the security page, try the dashboard demo, or get in touch.