Sandbox controls

These call sandbox-only PayPal endpoints (require-evidence, adjudicate) or local simulators (carrier scans, demo inbox). They stand in for time passing and for PayPal's reviewers.