Alright, I think this works https://github.com/rickmanelius/drupalpcicompliance/commit/68780dffc4bcc1e1fa7ab488ac02035453849ce0. Basically, I've corrected the copy/paste error but then I clarified the HPP behavior with validating the payment.