Webhooks

Async runs may include a webhook URL. WebProbe sends a stable delivery ID, JSON payload, and webprobe-signature: sha256=…, computed over the exact body. Receivers should verify before parsing and deduplicate delivery IDs.

Delivery uses a bounded timeout and exponential retries. Webhook targets always use the public-network URL policy even when trusted local target execution is enabled.

Redirects are rejected rather than followed. This prevents a previously approved public endpoint from redirecting a signed payload toward a private service or a different recipient.