Hi, Your requirements list is unusually good for a non-coder: server-authoritative timers, idempotent Stripe webhooks, separate dev and prod credentials, user isolation. Most briefs at this budget do not have any of that. So I will answer at the same level instead of just saying yes.