Release 8.7.0 - CashApp payment method integration

[david-ruiz-cko]

This release introduces support for the Cash App Pay payment method and enhances customer and device data models to support new payment flows and risk checks. The most important changes are summarized below:

Cash App Pay Integration:

• Added the CashApp payment method, including its configuration, initialization state, customer profile sharing, and next action handling, to PaymentMethods and as a new class with supporting entities (CashAppAction, CashAppActionType, CashAppCustomerProfile, CashAppAddress). [1] [2] [3] [4] [5] [6] [7]

Customer and Device Model Enhancements:

• Extended the Customer model to include id, country, and taxNumber fields, and improved documentation for all fields. [1] [2]
• Enhanced the CustomerDevice model by adding fields for fingerprint, ipv4, ipv6, client (with a new enum CustomerDeviceClient), and os, and improved field descriptions. [1] [2] [3]

Common Types and Documentation Improvements:

• Improved the OsType enum documentation and clarified its use across wallet payment methods and customer devices.
• Expanded the PaymentMethodStatus enum with additional statuses and detailed documentation for each value.

These changes collectively enable Cash App Pay support and improve the flexibility and clarity of customer and device data handling.

[agent-wall-e]

🟡 Risk Classification: MINOR

Approval route: AI Review + Human Approval
Rollback controls: Staged rollout + rollback

Classification reasons

• no_low_class_matched
• prod_source_modified

Operational gates

• ✅ jira_ticket
• ✅ independent_review

Files analysed: 1

---

_{wall-e 2026.06.19-02 · policy 6b4ce2b3b45a…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[agent-wall-e]

🔵 Advisory review: Sound, but needs your judgement

This PR needs a human approval. The code itself reads as correct; whether it should land depends on context I don't have.

The diff shown contains only a version bump from 8.6.0 to 8.7.0, but the PR description claims extensive new code (CashApp payment method, Customer/CustomerDevice model changes, new enums). A human reviewer must verify the actual feature code is present and correct, as the diff appears incomplete.

For you to decide

• The diff is partial — only gradle.properties is shown, so none of the claimed CashApp classes, Customer/CustomerDevice enhancements, or enum changes can be verified against the stated intent.
• A reviewer must confirm the full changeset includes all described additions (CashAppAction, CashAppActionType, CashAppCustomerProfile, CashAppAddress, CustomerDeviceClient, updated PaymentMethodStatus, etc.) before approving.
• The version bump itself (8.6.0 → 8.7.0) is consistent with a minor/feature release, but correctness of the release version depends on whether the actual feature code is present and complete.
• If this is a release/merge commit that squashes many changes, the reviewer should inspect the full file tree diff rather than just this properties file.

---

_{This is not an approval. wall-e cannot auto-approve this PR — it is an opinion to help whoever does. Advisory review · us.anthropic.claude-sonnet-4-6 · wall-e 2026.06.19-02}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud