Health Stripe

Guard 6 (SPEC_STRIPE_MOR_ACCOUNT_SPLIT §9.4): the distinct-account-id + API-version probe.

Run BY HAND in the §11 dev rehearsal (curl -H 'Authorization: Bearer $ADMIN_API_KEY'): after the dev swap, hit this against dev and only proceed to prod on a 200. It is NOT an automated deploy gate — Modal deploys are non-atomic, so a post-deploy check can only detect, not block (the string-checkable guards 1-4 crash-on-boot in prod). Admin- gated so it isn't an open Stripe-API DoS/cost vector, and it makes a live network call so it stays OFF the request hot path + out of the startup validator.

Checks (with each account's LIVE key):

• each account's own acct_… id → assert they DIFFER (the only guard that proves two distinct accounts; guards 1-4 only compare strings). resolve_own_account_id recovers the id from Stripe's error if the key lacks account/KYC read scope, so the MoR key needs no accounts/KYC permission.
• The MoR account's webhook endpoints are pinned to STRIPE_API_VERSION.