Tenant administration
Webhook rotation, audit integrity proofs, waiver lifecycle, SLO targets, and the rule-pack marketplace.
Webhook delivery management
Rotate the HMAC signing key with a dual-key grace window so in-flight deliveries still verify while subscribers pick up the new key; replay any failed delivery with an operator-supplied idempotency key (X-DATABRIDGE-IDEMPOTENCY-KEY) so receivers can dedupe. Every action is gated through requireRole on the API and audit-logged under webhook.rotate / webhook.replay.
The previous secret stays valid for verification during the grace window so in-flight deliveries don't fail. Subscribers should swap to the new key before the window closes.
| Delivery | Event | Status | Error | Replay |
|---|---|---|---|---|
| dlq-001 | submission.rejected | 503 | receiver returned 503 after 3 attempts | |
| dlq-002 | submission.signoff | ETIMEDOUT | connection timed out after 10000ms |
| Event | URL | Attempt | Status | When | Delivered |
|---|---|---|---|---|---|
submission.signoff | https://hooks.fhe.ac.uk/databridge | 1 | 200 | 12/05/2026, 14:00 | Yes |
submission.gateway_uploaded | https://hooks.fhe.ac.uk/databridge | 1 | 202 | 30/05/2026, 16:00 | Yes |
submission.signoff | https://hooks.fhe.ac.uk/databridge | 1 | 200 | 25/05/2026, 16:20 | Yes |
submission.rejected | https://hooks.fhe.ac.uk/databridge | 3 | 503 | 02/06/2026, 12:00 | No |