Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Peter Alexander 26ba242ff0 Revise Events design sketch: Standard Webhooks, client-supplied secret, tuple-based identity ... - Adopt Standard Webhooks as the delivery signature scheme (webhook-id/timestamp/signature, v1 base64, multi-sig rotation); keep X-MCP-Subscription-Id as the one MCP-specific header - Webhook secret is now client-supplied and REQUIRED (whsec_ + 24-64B base64, server MUST reject otherwise); server never generates one - Subscription identity is (principal?, delivery.url, name, params); the response returns a server-derived id used only for routing, never as input - Revert to no-mode-mandatory for delivery modes - TLS is now MUST for delivery.url - Allow cursor: null in any delivery for event types without replay; clarify CursorExpired always implies a possible gap		2026-04-30 15:02:32 +01:00
..
design-sketch-proposal.md	Revise Events design sketch: Standard Webhooks, client-supplied secret, tuple-based identity	2026-04-30 15:02:32 +01:00