Lifted Payments Payment Statement Audit Model

A processor-neutral, machine-readable model for normalizing monthly merchant payment-processing statements without storing cardholder data. Package 1.1.3 preserves the schema 1.1.0 record contract and the v1.1.2 validator rules.

The release includes a JSON Schema Draft 2020-12 contract, Decimal-safe Python validator, CSV template, synthetic example, exact field definitions, two registered valid vectors, fourteen deliberately invalid vectors, a reproducible validation report, exact dependency pins, SHA-256 inventory, public threat model, and fail-closed publication gate.

Version 1.1.3 separates portable package validity from candidate readiness and published attestation. Candidate publication requires a clean committed tree, authoritative origin, complete remote tag inventory, exact local/remote tag alignment, and a monotonic version. Published attestation performs bounded, non-executing comparisons of GitHub, Zenodo, DOI, Hugging Face, and Software Heritage identities and bytes, and rejects unsafe redirects, oversized responses, archive traversal, case-fold aliases, symlinks, undeclared members, digest mismatches, and public identity drift.

The exact merge worktree passed 81 tests, and the unpacked release archive passed 81 tests with one Git-history-only regression skipped as designed. The package gate passed 14/14 checks, the tagged candidate gate passed 15/15 checks, and the tagless unpacked archive correctly failed closed. Ruff, compileall, gitleaks, complete checksums, and manifest-byte equality were clean before publication.

This model is a normalization and comparison aid. The publication gate proves declared package and release provenance; it is not an accounting opinion, legal review, interchange-pricing guarantee, malware sandbox, qualification determination, price quote, or guarantee of savings. Automated screening cannot prove arbitrary notes contain no confidential information; human review remains required before public release. No real merchant or cardholder data is included.

Canonical documentation: https://liftedpayments.com/payment-processing-statement-audit/
Versioned source: https://github.com/Lifted-Holdings/payment-processing-resources/releases/tag/v1.1.3
Security policy: https://github.com/Lifted-Holdings/payment-processing-resources/blob/v1.1.3/SECURITY.md
Reserved version DOI: https://doi.org/10.5281/zenodo.21764642
Release archive SHA-256: b1d398ada2bb456de0fffc5278b68a48554ffd5d80232d654416102ad87d5897