[armando-rodriguez-cko]

Summary

The API no longer documents the return-encrypted-cvv and Encryption-Key headers on card update, and the revoke and suspend request bodies are optional. This PR deprecates the headers (they still work) and lets revoke and suspend be called without a body.

Changes

• CardUpdateHeaders: marked @Deprecated, behaviour unchanged.
• IssuingClient / IssuingClientImpl: updateCard(String, UpdateCardRequest, CardUpdateHeaders) and updateCardSync(String, UpdateCardRequest, CardUpdateHeaders) marked @Deprecated, pointing to the overloads without headers.
• IssuingClient / IssuingClientImpl: new revokeCard(String), revokeCardSync(String), suspendCard(String), suspendCardSync(String); the existing overloads accept a null request, in which case no body is sent. Javadoc added to all revoke and suspend methods.
• Tests: IssuingClientImplTest covers revoke and suspend without a body (sync and async) and the deprecated header overloads; CardUpdateResponseSerializationTest keeps the header tests.

Verified against the sandbox: update with and without the deprecated headers (200), and revoke and suspend without a body and with {} (200, status changes applied), sync and async.

API Reference

• PATCH /issuing/cards/{cardId}: https://api-reference.checkout.com/tag/cards/PATCH/issuing/cards/%7BcardId%7D
• POST /issuing/cards/{cardId}/revoke: https://api-reference.checkout.com/tag/cards/POST/issuing/cards/%7BcardId%7D/revoke
• POST /issuing/cards/{cardId}/suspend: https://api-reference.checkout.com/tag/cards/POST/issuing/cards/%7BcardId%7D/suspend

Breaking changes

None: deprecations and new overloads only, and the headers are still sent when set.

README

No changes needed; the README does not document these methods.

[agent-wall-e]

🟢 Risk Classification: LOW

Approval route: AI Auto-Approval
Rollback controls: Automated Instant Rollback + feature flags

Classification reasons

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The change only adds new convenience overloads delegating to existing methods, deprecates existing classes/methods without altering behavior, and removes an unnecessary parameter validation—all within existing code paths, endpoints, and abstractions with no new integrations, persisted data, or auth changes.

Operational gates

• ✅ jira_ticket (INT-1713)
• ✅ independent_review

Files analysed: 5

---

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.
2.2.6_logical_extension — The change only adds new convenience overloads delegating to existing methods, deprecates existing classes/methods without altering behavior, and removes an unnecessary parameter validation—all within existing code paths, endpoints, and abstractions with no new integrations, persisted data, or auth changes.	classifying	§2.2.6	Sonnet 4.6 evaluator promoted minor → low: the change reuses existing code paths and does not cross a trust boundary.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[agent-wall-e]

🟢 Risk Classification: LOW

Approval route: AI Auto-Approval
Rollback controls: Automated Instant Rollback + feature flags

Classification reasons

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:All changes are non-destructive deprecations, Javadoc additions, and new no-arg overloads that delegate to existing methods with null — no new endpoints, no new data persistence, no auth changes, and no new external integrations.

Operational gates

• ✅ jira_ticket (INT-1713)
• ✅ independent_review

Files analysed: 11

---

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.
2.2.6_logical_extension — All changes are non-destructive deprecations, Javadoc additions, and new no-arg overloads that delegate to existing methods with null — no new endpoints, no new data persistence, no auth changes, and no new external integrations.	classifying	§2.2.6	Sonnet 4.6 evaluator promoted minor → low: the change reuses existing code paths and does not cross a trust boundary.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[agent-wall-e]

🟢 Risk Classification: LOW

Approval route: AI Auto-Approval
Rollback controls: Automated Instant Rollback + feature flags

Classification reasons

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The PR only adds no-arg convenience overloads delegating to existing methods, marks existing classes/methods @Deprecated with unchanged behaviour, removes unnecessary parameter validation, and adds Javadoc — no new endpoints, external integrations, persisted data, auth changes, or background processes are introduced.

Operational gates

• ✅ jira_ticket (INT-1713)
• ✅ independent_review

Files analysed: 11

---

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.
2.2.6_logical_extension — The PR only adds no-arg convenience overloads delegating to existing methods, marks existing classes/methods @Deprecated with unchanged behaviour, removes unnecessary parameter validation, and adds Javadoc — no new endpoints, external integrations, persisted data, auth changes, or background processes are introduced.	classifying	§2.2.6	Sonnet 4.6 evaluator promoted minor → low: the change reuses existing code paths and does not cross a trust boundary.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[agent-wall-e]

🟢 Risk Classification: LOW

Approval route: AI Auto-Approval
Rollback controls: Automated Instant Rollback + feature flags

Classification reasons

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:All changes are non-destructive deprecations, Javadoc additions, removal of over-strict parameter validation, and new default interface methods that delegate to existing overloads with null — no new endpoints, persisted data, auth changes, or external integrations are introduced.

Operational gates

• ✅ jira_ticket (INT-1713)
• ✅ independent_review

Files analysed: 11

---

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.
2.2.6_logical_extension — All changes are non-destructive deprecations, Javadoc additions, removal of over-strict parameter validation, and new default interface methods that delegate to existing overloads with null — no new endpoints, persisted data, auth changes, or external integrations are introduced.	classifying	§2.2.6	Sonnet 4.6 evaluator promoted minor → low: the change reuses existing code paths and does not cross a trust boundary.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[agent-wall-e]

✅ Auto-approved — this PR meets all Low-risk criteria.

All checks passed, no unresolved comments, and the change classification is:

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The PR only adds no-arg default interface method overloads delegating to existing implementations, marks existing code as deprecated without changing behavior, removes unnecessary parameter validation, and adds Javadoc—no new endpoints, external integrations, persisted data, auth changes, or background processes are introduced.

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}

[agent-wall-e]

✅ Auto-approved — this PR meets all Low-risk criteria.

All checks passed, no unresolved comments, and the change classification is:

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The PR only adds no-body convenience overloads that delegate to existing methods with null, deprecates existing headers/methods without removing them, relaxes validation on existing endpoints, and adds Javadoc—no new endpoints, services, persisted data, auth changes, or external integrations are introduced.

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}

[agent-wall-e]

✅ Auto-approved — this PR meets all Low-risk criteria.

All checks passed, no unresolved comments, and the change classification is:

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The PR only deprecates existing methods/classes, adds no-body convenience overloads that delegate to existing code paths with null, removes parameter validation for optional request bodies, and adds Javadoc — no new endpoints, persisted data, auth changes, external integrations, or background processes are introduced.

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}