Webhooks

Incident payload

Copy{
  "network": "mainnet-beta",
  "targetId": "solana:...",
  "policyId": "...",
  "evidenceRef": "...",
  "assessment": "critical"
}

Receiver requirements

• Authenticate every message.
• Reject stale timestamps and replays.
• Use stable event IDs for idempotency.
• Fetch and verify referenced evidence.
• Never treat delivery as permission to mutate transaction bytes.