checkout.paid delivery
The traveler completed payment on the operator's hosted page; the new offer's own status follows as offer.* events.
postWebhookcheckout.paid
Headers
X-UpgradeAgent-Signaturestring required
t=<unix>,v1=<hex HMAC-SHA256(secret, ${t}.${body})>
X-UpgradeAgent-Event'checkout.paid' required
X-UpgradeAgent-Idempotency-Keystring required
Stable per (quote, offer, status) — dedupe on it.
X-UpgradeAgent-Webhook-Idstring required
Payload
Response
Acknowledge within 10s. Anything else (or a timeout) is retried with backoff.
Changes
Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.