Delivery
Each delivery includes a timestamp, stable event ID, source record identity, observed time, and evidence references. Delivery is at least once, so consumers must deduplicate event IDs.
Venue Authority trust center
Webhook signing and retry semantics
Venue Authority sends signed, versioned change events with stable identifiers.
Signing
The endpoint secret is shown once. Venue Authority signs the payload and timestamp so the receiver can verify the sender before processing the event.
Retries
Failed deliveries use bounded retries and retain an inspectable terminal state with attempt count and bounded response metadata.