Validated codes, ranked by what happened at a real checkout.
Ask by merchant, URL, or category.
Status, age, success rate. Commission is not an input, and a CI test enforces it.
Every checkout writes back and re-ranks the catalog.