Ephemeral 24h webhook sink, multi-scheme HMAC-SHA256 verifier, JSON payload differ, and outbound chaos fault lab.