結果
1Sign the raw request bodyUse an HMAC or provider public-key signature and include a timestamp.
2Reject replaysStore event IDs and enforce a short timestamp tolerance.
3Make handlers idempotentRepeated delivery must not create duplicate invoice states or accounting entries.