available_cents before you issue a large card: a card the balance can’t cover is refused with org_wallet_funding_required, and no money moves.
Your credential decides the mode: a sandbox credential reads a mock balance, a production credential reads the real one. You add real funds in the dashboard, under Wallet.