Sending (Server layer)
The immutable PendingWebhook builder — secret rotation, alternate signing schemes, backoff and Retry-After, timeouts, SSRF, mutual TLS, proxies, tags, and standalone delivery persistence.
Receiving (Client layer)
The inbound pipeline in order — raw-body capture, verification, throttling, dedupe, filtering, storage and dispatch — plus every shipped receive adapter and the non-signature verifier seam.
Subscriptions and fan-out (Platform layer)
Register endpoints per event type, fan an event out to every matching subscription, and switch on health scoring, payload transforms, the egress allowlist and AsyncAPI export.
Self-service portal (opt-in)
The tenant-scoped screens a customer uses to manage its own endpoints — the three required setup steps, the fail-closed gate, and how to resolve a non-Jetstream tenant.
Observability dashboard (opt-in)
The customer-facing analytics UI over the delivery log — the three setup steps, the fail-closed gate, tenant and operator mode, the percentile tiers, and the optional JSON metrics endpoint.
Operator console (opt-in)
Two embeddable Livewire components for the screens you run — deliberately unscoped across every tenant, so they belong behind an operator-only gate.