ingestion

Inbound webhook receivers. See ADR-0003 for the trust model.

📄️Receive a signed provider webhook (GitHub / Stripe / Slack)

Receiver for a **signed** provider. The raw request body is read and the provider's

📄️Receive a token-authenticated (or open) generic webhook — incl. Docker Hub

Catch-all receiver for senders with **no signature scheme at all** — self-hosted /