Merchant API Cutover Validator
Methodology for static Merchant API migration readiness scans.
The scanner combines deterministic regex rules, ast-grep rules where available, secret scanning, ZIP safety checks, and merchant workflow assessment signals.
Findings are evidence-based and include severity, confidence, impact, recommendation, validation step, and official reference where available.
Scanner-health warnings are surfaced when optional tools are unavailable. The app should not present a result as fully verified when critical scan scope did not run.