Release 4.0.0

[armando-rodriguez-cko]

• The merchant-specific subdomain (environment_subdomain) is now required. Set it, or call the deprecated use_legacy_domain() to keep using the shared checkout.com hosts (feat: require environment_subdomain or an explicit use_legacy_domain opt-out #226)
• An invalid subdomain now raises instead of being silently ignored (feat: require environment_subdomain or an explicit use_legacy_domain opt-out #226)
• Add optional amount to VoidRequest to support partial voids (feat(payments): add optional amount to VoidRequest for partial voids #229)
• Add the ISV (SaaS seller) payout schedule fields balance_minimum, carry_forward_enabled and payment_instrument_id (feat(accounts): add ISV payout schedule fields and payment_instrument_id #230)

[agent-wall-e]

🟡 Risk Classification: MINOR

Approval route: AI Review + Human Approval
Rollback controls: Staged rollout + rollback

Classification reasons

• no_low_class_matched
• prod_source_modified

Operational gates

• ✅ jira_ticket
• ✅ independent_review

Files analysed: 1

---

_{wall-e 2026.06.19-02 · policy 376219bc71e6…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[agent-wall-e]

🔵 Advisory review: Sound, but needs your judgement

This PR needs a human approval. The code itself reads as correct; whether it should land depends on context I don't have.

This diff only bumps the version string from 3.13.0 to 4.0.0, but the PR description claims four substantive changes (required subdomain, invalid subdomain validation, VoidRequest amount, ISV payout fields). None of those changes are visible in the diff.

For you to decide

• The diff is almost certainly partial — only properties.py is shown, so the actual feature and breaking-change code cannot be verified against the PR claims.
• A major version bump (3.x → 4.0.0) implies breaking changes; a human reviewer must confirm the breaking-change behaviour (required subdomain, raised exception on invalid subdomain) is actually implemented and properly documented/communicated.
• The version bump itself looks mechanically correct for a 4.0.0 release, but correctness of the release as a whole cannot be assessed from this fragment alone.

---

_{This is not an approval. wall-e cannot auto-approve this PR — it is an opinion to help whoever does. Advisory review · us.anthropic.claude-sonnet-4-6 · wall-e 2026.06.19-02}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud