Flag unauthenticated webhook requests for billing team before billing run

Your incoming webhook requests can arrive unverified, causing fraudulent charges, failed handoffs, and revenue leakage. Catch and quarantine suspicious submissions so billing and ops see incidents before the next billing run.