Authenticate, then refresh. Outbound delivery is disabled until explicitly enabled on the worker.
Approved HTTPS endpoints
Administrators configure only explicitly allowlisted destination hosts. Secrets remain in the worker's secret manager, never in this form.
| Endpoint | Hostname | State |
|---|
Queue an approved event
ITSM: use the ID of a separately approved v0.8 work-order export. Webhook: use an existing v0.10 escalation notice ID.
A successful HTTPS response means the remote service accepted a request. It does not prove a ServiceNow ticket was created or that a human was notified. Verify external receipts independently.
Delivery messages
| Event | State | Attempts | Response |
|---|
Operational acceptance checklist
The following remain operator-required before production deployment.
✓ Database-backed idempotency key and delivery attempts
✓ Admin-only endpoint controls
✓ External destination HTTPS and exact allowlist
✓ Failures and retries recorded without response-body logging
○ Rehearsed PostgreSQL restore and image-volume recovery
○ Real ITSM sandbox delivery and reconciliation
○ Egress firewall and DNS-rebinding protections
○ Real identity-provider, browser, security and load testing