output.webhook.verify-not-emitted
- Category
- Generated output
- Default severity
- Note
- Applies to
- API specification
- Default outcome
- Informational
- Recommended action
- No action needed
- Grouped by
- Defect code
Why it matters
The spec declares webhook events but no signing convention is knowable from the document, so no verifier was guessed.
How to fix it
- Set targets.ts.webhook_verify: true to emit the HMAC-SHA256 verifySignature helper — only if the API really signs that way.