WooCommerce
Theme, product CSV, cart, checkout and account templates are packaged.

DEMO → PRODUCTION
Transparansi tentang komponen yang sudah siap dan hal yang masih membutuhkan akun merchant atau credential pemilik Pokepiko.
Control room, notification outbox, consent-aware analytics, monitor, dan UAT sudah tersedia. Konektor merchant tetap fail-closed sampai credential resmi diverifikasi.
Theme, product CSV, cart, checkout and account templates are packaged.
VA, QRIS and cards need a verified merchant account, API keys and webhook secret.
Requires the official WooCommerce extension and an approved PayPal business account.
J&T, JNE, GoSend and Grab Send rates require an API account and origin address.
Contract rates, declared-value rules and pickup credentials must be supplied.
Order, payment, grading and recovery emails need a verified sending domain.
Consent-aware dataLayer events are ready; production measurement IDs are intentionally absent.
The demo uses display-only reference rates. Production needs a scheduled FX source, rounding rules and settlement-currency review.
Product and article schema, sitemap, robots, manifest and a demo product feed are included; switch the canonical domain and indexing policy at launch.
The final WhatsApp number, inbox owner and privacy workflow must be confirmed.
Notification inbox, wishlist alerts, verified-review eligibility and tracked return requests are implemented; production records map to the customer account and selected review/returns plugins.
Tier, missions, referral, promo wallet and drop reminders are implemented as local demo flows; production rules must be recreated and validated in the selected loyalty and marketing extensions.
The demo includes 100 lots, 25 × 4 waves, proxy bidding, anti-sniping, bidder pass and winner checkout. The companion plugin provides server transactions, row locks, idempotency, audit events and WooCommerce winner orders.
Real bidding must remain closed until identity, phone, terms, card authorization or deposit, gateway capture, risk rules and non-payment operations are connected and approved.
Admin metrics, bidder review signals, integration gates and an idempotent notification outbox are deployed without exposing customer payloads or secrets.
The production stack, storefront routes, APIs and security boundaries are checked on a schedule; backup archives are validated separately.