A stablecoin-funded card authorises against a wallet the programme doesn’t hold.
Every tap needs a live on-chain balance check, and every chargeback has to reconcile against that wallet.
Our reference architecture for the pattern, running in production at Gnosis Pay: