Webhooks and events

• Administrators and developers manage subscriptions for their own client and environment; laboratory administrators can also manage them in the Control Plane.
• Each subscription is bound to one client and one environment; the signing secret is shown once.
• Configuration changes fail closed: a subscription is disabled before a change and only re-enabled once the change is audited.
• Delivery evidence is filtered to your client and the selected environment.

Webhooks notify; the API remains the source of truth. Deliveries are at-least-once — deduplicate and reconcile from events.