Documentation

Outbound webhooks

Receive signed, deduplicated lifecycle change events.

Delivery

Each request includes an event ID, UTC timestamp, content type, and HMAC-SHA256 signature over the raw body. Consumers should persist the event ID before processing.

Retries

Transient failures use exponential backoff with jitter. Repeated permanent failures open a circuit and disable the destination without creating an owner support task.

Testing

The dashboard validates public HTTPS DNS resolution and sends a bounded test event. Private, link-local, metadata, credential-bearing, and nonstandard-port URLs are blocked.