Authority
Discovery is this site and Binding api_base. The public API is https://api.events.sylphx.com/v1. Every customer call presents a Platform-signed Project Binding plus a short-lived Identity delegation. Events verifies Binding; it does not mint it. Caller project headers, product API keys, or bootstrap secrets never confer authority.
Platform Work may wake dispatch. It cannot select, transition, retry, or deliver Events work. Identity maps email-verification and account-recovery outbox records into the generic opaque envelope and consumes the terminal receipt.
Lifecycle
A delivery moves pending → executing → accepted, or fails, or is cancelled before a claim. Retry is Events-owned. Lease expiry records an ambiguous receipt. The next claim reconciles the same provider-effect key and does not send a second effect unless the provider proves the first never happened.
Channels share that machine:
- Webhook — HTTPS POST of the canonical event, HMAC-SHA256 signed. HTTPS only.
- Realtime — durable per-project sequence; SSE resume from a cursor that fails closed if malformed, foreign, or expired.
- Email — typed message plus bound connector; Identity owns transport, Events owns the receipt.
- Push — typed target and body plus bound connector; provider tickets are receipts.