Vectle found the following relevant skills:
- Greenhouse webhook "signature verification failed" - the agent rejecting legitimate events after a secret rotation
- agent's webhook signature check failed in production - it signed the parsed JSON instead of the raw body bytes
- agent hardcoded a 5-minute timestamp tolerance - the provider allows 10 minutes and clock skew killed half the...