Complexity: High (200 points)
Why this matters
dry-run.yml hits Horizon but may not verify webhook signatures. HMAC bugs ship.
Problem
Webhook unit tests exist. dry-run matrix may skip signature verification against a mock receiver.
What "done" looks like
- Mock server job or step verifying HMAC.
- Matrix still covers Horizon.
- Docs.
Scope
- In: dry-run.yml, webhook.ts, docs.
- Out: Dashboard live E2E.
Guidelines
- Key files:
.github/workflows/dry-run.yml, src/webhook.ts, docs/USAGE.md
- Watch for: secrets in logs, timing-safe compare, schema version.
- Constraints: Don’t call real dashboard. Mock only.
- Validate:
workflow + npm test webhook
PR must include
Complexity: High (200 points)
Why this matters
dry-run.yml hits Horizon but may not verify webhook signatures. HMAC bugs ship.
Problem
Webhook unit tests exist. dry-run matrix may skip signature verification against a mock receiver.
What "done" looks like
Scope
Guidelines
.github/workflows/dry-run.yml,src/webhook.ts,docs/USAGE.mdworkflow + npm test webhookPR must include