PGateway

Security by construction

A gateway sits next to partner credentials, so its guarantees are enforced in code and tested against a real database.

Secrets are read from files or environment at call time; the catalogue only holds references.

Problem responses follow RFC 9457 and never echo the offending value; logs mask fields by key.

Amounts are integers or decimal strings; anything beyond the precision a float64 holds exactly is refused.

Dedicated system user and a sandboxed service unit with a read-only file system.

Audit is append-only and the long-term archive sits on object-lock storage.

Each guarantee has a test against real PostgreSQL that has been shown to fail when the guarantee is broken.

Bring your integrations under one roof

Tell us which systems you connect and what you must be able to prove afterwards.