summary_1line: update rollout note wording round 01

task_title: Webhook Signature Hotfix

task_goal: Keep bounded compile useful even when the task contains valid low-priority clutter

fact_value: rollout wording aligned round 01

type: text

content: rollout checklist wording adjusted


summary_1line: record merchant reply macro round 01

fact_value: merchant macro refreshed round 01

content: support macro updated for webhook questions


summary_1line: add monitoring counter note round 01

fact_value: unsigned replay counter noted round 01

type: json

content: dashboard note for replay counter captured


summary_1line: capture pager handoff reminder round 01

fact_value: pager handoff captured round 01

content: handoff reminder logged for weekend coverage


summary_1line: store staging screenshot note round 01

fact_value: staging screenshot archived round 01

content: staging screenshot note archived


summary_1line: record regional canary note round 01

fact_value: eu canary verified round 01

type: stdout

content: regional canary verification completed


summary_1line: draft release note wording round 01

fact_value: release note draft updated round 01

content: release note wording updated for hotfix lane


summary_1line: record unrelated nightly flake round 01

fact_value: nightly flake parked round 01

type: stderr

content: nightly flake captured for later cleanup


summary_1line: queue follow-up cleanup item round 01

fact_value: cleanup follow-up queued round 01

content: follow-up cleanup item added to backlog


summary_1line: append runbook command note round 01

fact_value: runbook command logged round 01

content: runbook command note added for operators


summary_1line: triage unsigned webhook replay regression

content: unsigned replay accepted in staging


summary_1line: identify target file for signature restore

type: diff

content: restore signature verification in webhook guard


summary_1line: choose signature verification restore as next action

fact_value: re-enable HMAC verification

content: re-enable verify_hmac_signature before accepting webhook


summary_1line: pin validation gate for downstream execution

fact_value: reject unsigned webhook replay

content: guard must reject unsigned replay before rollout