Events and webhooks
Every event the platform can emit is in a catalog, so a subscription can be checked before it is wired. Deliveries are signed; the secret is shown once and rotated with an overlap window.
A delivery that failed can be replayed with the same event id, so your receiver can deduplicate.