product / 3.9.0 Beta 23

Configured Webhook Delivery Pilot

Adds deployment-configured delivery of signed public change events through a persistent outbox, bounded retries and a protected operator console.

Included changes

01Eligible public change events are enqueued once per configured destination using the existing stable public event identity.
02Each request uses the documented HMAC-SHA256 v1 signature headers, an exact HTTPS-origin allowlist and an eight-second timeout.
03A persistent outbox and per-attempt ledger record bounded pending, processing, retry, delivered and terminal-failure states without storing receiver bodies.
04Administrators can run one bounded cycle or reschedule an eligible failed record; auditors receive the same sanitized read-only view.

01Destinations are configured by deployment operators; there is no public endpoint registration, tenant self-service or browser-originated delivery.
02The pilot does not provide endpoint challenge verification, automatic key rotation, guaranteed delivery, an SLA or confirmation that a receiver processed an accepted request.