webhook delivery integrity audit derived

{
  "input": {
    "body": {
      "deliveries": [
        {
          "status": 500,
          "attempt": 1,
          "event_id": "evt-1"
        },
        {
          "status": 200,
          "attempt": 2,
          "event_id": "evt-1"
        },
        {
          "status": 500,
          "attempt": 3,
          "event_id": "evt-1"
        },
        {
          "status": 200,
          "attempt": 1,
          "event_id": "evt-2"
        },
        {
          "status": 202,
          "attempt": 2,
          "event_id": "evt-2"
        },
        {
          "status": 503,
          "attempt": 1,
          "event_id": "evt-3"
        },
        {
          "status": 503,
          "attempt": 2,
          "event_id": "evt-3"
        },
        {
          "status": 429,
          "attempt": 3,
          "event_id": "evt-3"
        },
        {
          "status": 503,
          "attempt": 4,
          "event_id": "evt-3"
        },
        {
          "status": 502,
          "attempt": 1,
          "event_id": "evt-4"
        },
        {
          "status": 200,
          "attempt": 1
        }
      ],
      "max_attempts": 4,
      "success_statuses": [
        200,
        202,
        204
      ]
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "intact": false,
      "limits": {
        "maxEvents": 2000,
        "maxSchemas": 100,
        "maxFindings": 500,
        "maxAttributes": 500,
        "maxPartitions": 500,
        "cardinalityWarning": 100
      },
      "passed": false,
      "complete": true,
      "findings": [
        {
          "code": "DELIVERY_EVENT_ID_MISSING",
          "detail": "Delivery 10 names no event, so it cannot be attributed.",
          "delivery": 10
        },
        {
          "code": "RETRY_AFTER_SUCCESS",
          "detail": "Event evt-1 was retried after a successful delivery.",
          "event_id": "evt-1"
        },
        {
          "code": "DUPLICATE_SUCCESSFUL_DELIVERY",
          "detail": "Event evt-2 succeeded 2 times, so the receiver was called more than once and had to be idempotent about it.",
          "event_id": "evt-2",
          "successes": 2
        }
      ],
      "request_id": "example-request",
      "service_id": "webhook_delivery_integrity_audit",
      "assumptions": [
        "A delivery record is read from status or status_code and from event_id or id, because both spellings are common.",
        "An event is delivered when any attempt returned a success status. More than one success means the receiver was called twice.",
        "No payload is inspected and no signature or secret is handled; this audits the delivery log."
      ],
      "limitations": [
        "Delivery bookkeeping over the records supplied. Whether the receiver actually processed an event is not knowable from a status code.",
        "intact is true only when every record was readable and every event was delivered exactly once within its attempt limit."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "not_examined": [],
      "finding_count": 5,
      "status_counts": {
        "200": 3,
        "202": 1,
        "429": 1,
        "500": 2,
        "502": 1,
        "503": 3
      },
      "service_version": "1.0.0",
      "findings_by_code": {
        "RETRY_AFTER_SUCCESS": 1,
        "DELIVERY_NOT_SUCCEEDED": 1,
        "DELIVERY_EVENT_ID_MISSING": 1,
        "DELIVERY_ATTEMPTS_EXHAUSTED": 1,
        "DUPLICATE_SUCCESSFUL_DELIVERY": 1
      },
      "success_statuses": [
        200,
        202,
        204
      ],
      "distinct_event_count": 4,
      "delivered_event_count": 2,
      "exhausted_event_count": 1,
      "duplicate_success_count": 1,
      "examined_delivery_count": 11,
      "supplied_delivery_count": 11,
      "undelivered_event_count": 2
    }
  }
}