Lexicon
Credit-push
A payment topology where the payer’s side initiates the transfer (“send ₹340 to them”), versus debit-pull, where the payee presents credentials and asks (“take ₹340 from this card”). Push systems never hand the payer’s credentials to merchants, so credential theft has nothing to eat; fraud migrates to social engineering instead. UPI is push by design; cards are pull. For agents the distinction is existential: a pullable agent is a standing vulnerability, a push-only agent is an auditable actor (cut-0203).