Every first-party product — Business and the Nigeria corridor — runs through the same documented, versioned API. Sandbox keys work instantly; simulator and production adapters share one contract.
First-party apps use the same public API external tenants do.
Idempotency-Key on every mutation; optimistic version checks.
Webhooks carry event id, aggregate version, timestamp and signature.
One canonical adapter contract; simulation is marked at the component level.