- a resumable Job event stream for an active client; and
- signed webhooks for server-to-server notifications.
Receiver requirements
Webhook consumers should be prepared to:- verify the signature against the unmodified request body;
- reject stale or invalid signatures;
- deduplicate using the event ID;
- acknowledge quickly, then process asynchronously;
- tolerate duplicate and out-of-order delivery; and
- fetch the current Job projection before taking consequential action.
Do not implement signature verification from this page. The algorithm and SDK helpers will be
documented when the webhook surface is released.