Week Ending 2026-07-03

🚀 Now live: Astrada Sandbox (GA) — external testers can run the full enrollment → verification → transaction flow against a dedicated sandbox with test credentials, without touching production.

Sandbox environment (new)

• Now live: the Astrada Sandbox is available to onboarded testers. You can now exercise the full enrollment → verification → transaction flow against a dedicated sandbox environment with test credentials, without touching production.
• Simulate card-network ingestion on demand. New per-network simulate-ingestion endpoints let you inject synthetic clearing/authorization activity for Mastercard (SmartData), Amex (GL), and Visa (VBDS), plus a simulate-transaction-scenario route that returns the resolvable messageIds per transaction so you can assert against the resulting GET /transactions and webhook payloads. Bulk-feed simulation accepts sandbox-only numberOfSyntheticCards, newCardCount, and transactionsPerCard request fields to size the generated data set.
• Sandbox enrollment accepts test cards only. Enrolling a non-test card in sandbox is rejected with a sandbox_card_not_allowed error; the @astrada.co/ts-test-cards package exposes the approved test-card pool and an isSandboxAllowedCard helper.
• Known limitation: test-data delete / cascading-delete endpoints are not yet available — sandbox test data cannot be torn down programmatically in this release. This feature is coming soon.

GET /card-verifications/3ds/{verificationId} — failure reasons

• A failed 3DS verification now tells you why, in a structured field. When a GET on a verification returns state: "failed", the response now carries a failureReason object: a normalized category, a cardholder-safe description, a retryable flag, and — when the issuer supplies them — issuerMessage, code, and acsReferences. You no longer have to infer the failure cause from step state.
• New: list verifications, filtered by state. GET /card-verifications/3ds?cardId={id}&state=failed returns a card's verifications so you can pull all failed attempts without walking individual verification IDs; the card subscription resource also gained a verifications link. This is purely additive.

Card Enrollment SDK

• Enrollment callbacks now hand you the identifiers you need. onSuccess now includes the cardId, and onError includes both cardId and subscriptionId, so you can correlate an enrollment outcome to the created resources without a follow-up lookup. A new onConnect callback fires when the SDK initializes, and all callbacks are now strongly typed. Action: upgrade to card-enrollment-sdk v1.38.1; existing callback signatures remain compatible (fields are additive).