coppa-compliance

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The documentation explicitly describes using credit-card/online payment transactions as a verifiable parental consent method (Method 2) and the BrightPath implementation specifies performing a USD 0.50 micro-transaction (refunded within 48 hours) to verify parents. This is an explicit payment/transaction mechanism (i.e., moving money) rather than a generic capability, so it meets the criteria for direct financial execution authority.