Webhooks:规范
使用 HMAC 对原始正文进行签名的出站 Webhook,具有稳定的交付身份、有限重试后进入死信队列、容忍时钟偏差的时间戳,以及回调 URL 中无秘密材料。
Inbound payment webhooks acknowledge receipt separately from ledger mutation, deduplicate by provider event identity, reconcile unknown outcomes via provider fetch, and treat the internal ledger as authoritative when ordering or payload conflicts arise.