An operational alert points to a contract bug that appears only under mixed production data. The affected area is webhook receiver.
Repair the webhook receiver request stream implementation so it enforces a per-key sliding window and reports allowed and rejected requests.
Evidence
- Affected surface: Express / webhook receiver.
- Observed failure family: apply a sliding rate window.
- Scope policy: authorized must equal true.