The customer_id-required question (Card schema says Required, spec says nullable) can only be resolved by a real sandbox Create Card call. The smoke test remains the gate before any production flip: new-card tokenization -> payment -> saved card -> refund -> reconcile against a real endpoint.