All Fundraising components should be fully mockable and publicly testable. No test should contact a payment processor (test fixtures include sample API conversations).
We should run staging services on labs boxen, with realistic quantities of random data, protected only by minimal access restrictions to prevent complete pwnage (a la MediaWiki: namespace protection).
The staging environments should be provisioned using puppet modules which are available in both Labs and MW-Vagrant.