webhooks

You control the sender; thousands of customer endpoints you've never seen control your fate. The rubric hides in three places: what 'ordering' really costs, why retries need the receiver's cooperation, and the debugging surface most designs forget.

Both payloads parse to the same object. Only one authenticates. Trace the bytes, endpoint secret and timestamp before replaying the customer's missed events.

Deduplicating by call ID drops the analysis event. Replacing the whole record can erase it. Design the receiver around separate facts and explicit business effects.