---
issue: "032"
title: "SHKeeper release/refund doc paths include erroneous /shkeeper/ segment"
severity: major
domain: payment
labels: [backend, bug]
status: open
created: 2026-05-29
source: Doc vs Code Audit 2026-05-29
---

# 🟠 SHKeeper release/refund doc paths include erroneous /shkeeper/ segment

**Severity:** major
**Domain:** payment
**Labels:** backend, bug

## Description

The SHKeeper Payment Flow was documented with `/shkeeper/` in the release/refund paths. The actual backend routes are:

| Documented (wrong) | Actual (correct) |
|---|---|
| `POST /api/payment/shkeeper/:id/release` | `POST /api/payment/:id/release` |
| `POST /api/payment/shkeeper/:id/release/confirm` | `POST /api/payment/:id/release/confirm` |
| `POST /api/payment/shkeeper/:id/refund` | `POST /api/payment/:id/refund` |
| `POST /api/payment/shkeeper/:id/refund/confirm` | `POST /api/payment/:id/refund/confirm` |

The frontend `endpoints.payments.details` maps to `/payment/:id` (correct), so the frontend is unaffected. The issue is in the documentation and any external integration or test harness built from the docs.

## Current Behavior

Calling any `/shkeeper/` path returns 404.

## Expected Behavior

Documentation and any test harnesses should use paths without the `/shkeeper/` segment.

## Affected Files

- Doc file updated: `04 - Flows/Payment Flow - SHKeeper.md`

## References

- [Doc vs Code Audit Report](../09%20-%20Audits/Doc%20vs%20Code%20Audit%20Report%20-%202026-05-29.md) — Finding C30