Skip to content

Signed webhook ingress: verify and route peer push events #20

Description

@mortonanalytics

TerraYield need (P2, lowest priority of this set). TerraYield's alert engine (ty-alerts: threshold engine, alert state machine, notification dispatch) is the natural producer for Surface 3 push events (condition anomalies, pipeline completions). Before TerraYield builds the sender (morton-analytics-llc/eo_ag#20), IONe needs the receiver.

Acceptance

  • Ingress endpoint that verifies HMAC-SHA256 signatures per the frozen contract (shared secret per peer, timestamp header, bounded replay window; reject on any failure).
  • Verified events route into the existing signals pipeline attributed to the peer + workspace.
  • Duplicate delivery is idempotent (event id dedup).

Sequenced last: only matters after the peer-client, contract v1, and rendering issues above are closed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestfederationIONe federation / peer integration

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions