Move from Sandbox to Live

The request and response contract is the same in both environments. The SkyPay secret-key prefix selects the environment, so promotion does not require a new provider integration.

1. Build with an ssk_sand_ key.
2. Exercise the SkyPay Simulator, Paystack Sandbox, and Payaza Sandbox options that are available on checkout.
3. Verify signatures on Sandbox merchant webhooks and make event handling idempotent.
4. Complete KYC and wait for approval.
5. Create a Live key in the merchant dashboard.
6. Replace the server-side ssk_sand_... value with ssk_live_....
7. Register and test a separate Live webhook endpoint and secret.
8. Run a controlled Live payment before increasing traffic.

Do not copy Sandbox references, balances, webhook secrets, or idempotency keys into Live. Never expose either SkyPay secret key in browser or mobile code.

Provider availability can differ by environment. Handle GATEWAY_NOT_AVAILABLE without silently switching the payer to another option.