Webhook Reliability Checklist

1. Verify signatures with constant-time comparison.

2. Use idempotency keys and reject duplicate events safely.

3. Apply exponential backoff and dead-letter routing on retries.

4. Enforce timeout and payload size limits per endpoint.

5. Monitor delivery latency, failure ratio, and retry depth.

6. Store raw event body for forensic replay when debugging.