Skip to main content
Documentation
Design Archive

Webhook and Event Design Boundary

Reliability and security requirements for a future event-delivery service.

Status

Dits has no hosted webhook service, event subscription API, delivery worker, signing secret, retry queue, or repository event stream. No current push, lock, or hosted user event can trigger an external webhook.

Possible design targets

  • Versioned event envelopes with stable identifiers, timestamps, and documented ordering limits.
  • Authenticated registration and signed deliveries with replay protection.
  • At-least-once retry semantics, idempotency guidance, dead-letter handling, and delivery observability.

Prerequisites before implementation claims

  • A hosted service and canonical server-side repository event model.
  • Tenant authorization, secret rotation, abuse controls, retention policy, and incident procedures.
  • End-to-end tests covering duplicates, delay, reordering, endpoint failure, and key rotation.

What can be evaluated today

  • Use local Dits hooks only for the hook names and behavior documented by the current CLI.
  • Use your automation platform's native filesystem or process triggers for local experiments.
  • Do not expose a receiver based on the removed speculative payload examples.

Related status