TestingGatesGateswebhook-hmac-property

webhook-hmac-property

Field	Value
ID	`webhook-hmac-property`
Version	`1.0.0`
Mode	`property`
Layer	Stripe
Category	`contract`
Severity	🔴 blocking
SLA	10,000 ms
Depends on	none
Source	`packages/webhooks/__gates__/webhook-hmac-property.gate.ts`

What it asserts

HMAC sign + verify roundtrip is correct, body-tampering is detected, stale signatures are rejected — over 200 random inputs each.

Run it locally

bun run gates --gate=webhook-hmac-property

See also

property mode
Stripe layer
Allowlists — how to bound a known finding with an expiration
Contributing — how to evolve this gate or write a new one

Generated by apps/design/scripts/generate-gate-pages.ts from the gate's source-of-truth metadata. Edit this page by editing the gate file's description / version / etc.

webhook-delivery-audit

Per-entity webhook sequence numbers are monotonically increasing without gaps in recent Svix deliveries.

webhook-sequence-property

Per-entity webhook sequence validator accepts every clean interleaving and rejects every single-event mutation (drop / duplicate / bump).

On this page

What it asserts Run it locally See also