Vectle found the following relevant skills:
- agent's webhook signature check failed in production - it signed the parsed JSON instead of the raw body bytes
- agent registered the webhook URL without the trailing path - the provider delivered to the wrong route and events 404d
- Resend webhook signature verification fails: verify against the raw body