How do you integrate payments safely in a full stack product?

Payments require correctness, security, and auditability. **Key practices:** - Use a trusted provider and hosted payment UI where possible - Never store raw card data (PCI) - Use idempotency keys for charge requests - Verify webhooks and handle retries - Maintain an order/payment state machine **Interview tip:** explain reconciliation and safe handling of asynchronous webhook events.