Reference

Webhooks and events

Every state change emits an event with a trace ID and a monotonic sequence. Delivery is at-least-once; consumers must be idempotent.

Event types

Event	Meaning
`warrant.approved`	Authority granted; includes digest and expiry
`warrant.revoked`	Revocation; includes acknowledgment state
`decision.no_bid`	Typed reason; never silent
`reservation.settled`	Settlement with journal reference
`deployment.acknowledged`	Target confirms matching revision
`emergency.stop`	Stop initiated, scope, acknowledgments

Signature

httpdelivery headers

AdBid-Event-Id: evt_01JEX
AdBid-Event-Type: warrant.approved
AdBid-Timestamp: 2026-11-09T12:31:02Z
AdBid-Signature: v1=HMAC-SHA256(…)
Idempotency-Key: evt_01JEX

Replay protection

Reject timestamps outside a five-minute window, verify the signature over the raw body, and deduplicate on event ID. A 2xx acknowledges; anything else is retried with exponential backoff and a bounded dead-letter path.