Someone on the team ran a harmless test on staging. It charged a real card. One provider key had been inherited from prod config months earlier and nobody caught it, because staging worked fine, and that was the problem. It cost us an apology and a refund we walked through by hand. Provider credentials are now scoped per environment at the config layer, so staging physically cannot reach a live rail. We'd like to hear the dumbest thing your staging has been quietly wired to.
Was this useful?