14 PHP source files: opening tags and local require targets checked (not a PHP syntax check).
Original merchant identifiers and credential literals absent from generated PHP.
Documented GoPay endpoint paths present; old gateway IP absent.
Actual payout SQLite schema: table creation, primary-key duplicate rejection and uncertain-state query passed using Python sqlite3.
PHP executable unavailable: PHP lint, PHP offline tests, HTTP session flows and hosted UI NOT executed.
No live gateway balance/status/withdrawal calls were made. Provider response schema and live settlement remain unverified.