Transaction review status changed
A transaction of the account changed its review status (in_review when the transactional firewall holds it, info_requested, released, rejected).
The payload is deliberately neutral: status and operation summary only — internal review reasons or compliance notes are never included. A rejected status can also come from the organization’s review deadline sweep (automatic rejection); the email and the review detail carry the standard deadline notice.
Every delivery includes X-Webhook-Event, X-Webhook-Event-ID, X-Webhook-Delivery-ID, X-Webhook-Timestamp and X-Webhook-Signature = hex(HMAC-SHA256(secret, timestamp + "." + body)). Respond 2xx; up to 5 attempts with incremental backoff.
Authorizations
Session JWT (from register/login) or API key (pk_...).
X-API-Key: <token> is accepted as an alternative header.
Body
Response
Return any 2xx to acknowledge the delivery.