EXISTING INSTALLATION: Read Current-Operating-Status.txt first. The four-project set is already published; steps below are reference for an authorized new installation or actual upgrade, not a request to repeat setup.

DreamPay Acumatica CHT Sandbox installation and upgrade — 2026.10.19
Supported Acumatica build: 26.100.0175 ONLY. Currency: CAD. Tenant: CHT Sandbox ONLY.
Other builds and tenants are unsupported by these binaries. This is not a universal installer.
Do not install superseded EncryptedStorage or original unmodified Workflow 1.1.2.

BACKUP AND SCOPE
1. Read About Acumatica and verify exact build. Confirm the hosting/application scope: website files and compiled code can affect every tenant sharing the application. CHT selection alone does not isolate publication. Do not publish to an instance where this would change production ERP under a test-only authorization.
2. Export existing DreamPay projects and record the complete selected project set, levels, endpoint mappings, role rights and native configuration. Obtain an application/database backup through the installation's supported administrator process. Preserve TEST and other projects. Never delete encrypted data, credentials or accounting documents for installation.
3. Verify SHA256SUMS.txt using shasum -a 256 on macOS or Get-FileHash -Algorithm SHA256 in PowerShell. Verify project content rather than relying on names such as AmountDialog1.1.1.

INSTALL / UPGRADE
4. Open Customization Projects SM204505 using an authorized Administrator/Customizer account. Import the Cloud 1.1.0 ZIP only if absent. For each existing Workflow/Reader project, use its supported replacement/import route; do not create duplicate projects containing the same assembly. Export each project before replacement. Import Workflow 1.1.2 CloudImportFix (level115) and Reader1.0.8 (level120). Base Cloud1.1.0 is level110. TEST is preserved, not automatically selected or published.
5. Validate the complete selected DreamPay set, then publish only in confirmed authorized application scope. Review all validation and publication errors. Keep Workflow OFF. Final Reader must remain1.0.8, ProofKey length37, empty input mask, read-only guard and explicit PUT/DELETE denial. DP201000.aspx PXDataSource Visible=True remains part of the base page fix.
6. In Web Service Endpoints SM207060, use DreamPaySandbox /25.200.001, extending Default /25.200.001. Preserve existing Invoice/Payment mappings. Add/verify DreamPayUIRequest mapped to DP201000 with its nine fields: ProofKey (key), RequestID, TenantLogin, ConnectionReference, ActorID, ActorName, CreatedAtUtc, ExpiresAtUtc, Payload. Values in the two UTC fields store UTC even if serialized without Z. Run the prepared keyed-GET validator; verify immutable expired-probe write denial with the approved controlled collector, never financial records.
7. Complete private OAuth/configuration and the minimum permission checklist in the course. Do not paste secrets into Acumatica fields, public templates or browser diagnostics. No IIS keys or certificate migration is required by this cloud solution.
8. Verify live payment-method branch mapping, fresh cash evidence (24h), open AR/GL period, proof reads, authenticated webhook reception and durable sync. In AR101000 enter the environment's separately bound public connection reference. Enable Workflow only when all prerequisites pass. Save, navigate away, reopen and verify in a fresh session. Server binding enabled alone does not prove native Workflow is ON.
9. Test with a restricted non-admin user on a NEW disposable saved/released/open CAD invoice. Never reuse protected accounting acceptance documents. Verify exactly one Sale, authenticated notification, one ERP payment/application, posted balanced GL and expected invoice balance. Never resubmit an uncertain payment.

ROLLBACK
Turn native Workflow OFF and save/read back. Keep captured payments queued for reconciliation and preserve accounting records. Restore the prior exported project contents and publish the prior complete approved project set in confirmed application scope; do not unpublish all projects or delete tables/endpoints. Preserve Reader1.0.8 for this CHT rollout unless a separately reviewed Reader rollback is required. Restore website release using the deployment's saved start script and backup; verify test health. OAuth token files rotate independently: NEVER restore an old refresh token with a code rollback. Reconcile existing captures using their original unique references before any further action.
