Inbound payment webhooks acknowledge receipt separately from ledger mutation, deduplicate by provider event identity, reconcile unknown outcomes via provider fetch, and treat the internal ledger as authoritative when ordering or payload conflicts arise.