{"service":"alos-public-portfolio","proof_type":"sanitized-webhook-architecture","webhook_roles":[{"role":"provider-result-callback","visibility":"private-target","purpose":"Return bounded provider execution results."},{"role":"compute-completion-receipt","visibility":"evidence-path","purpose":"Attach completion metadata and artifacts to a run."},{"role":"agent-execution-receipt","visibility":"audit-path","purpose":"Record agent-side execution evidence."},{"role":"external-relay-boundary","visibility":"isolated","purpose":"Separate external provider callbacks from founder control authority."},{"role":"verification-gate","visibility":"fail-closed","purpose":"Reject outcomes that do not satisfy evidence requirements."}],"implementation_sources":["alos/cloudflare/kaggle-provider-bridge.ts","alos/cloudflare/kaggle-external-relay.ts","alos/cloudflare/compute-result-consumer.ts"],"secret_policy":"No webhook token, signing secret, private hostname or provider credential is published here."}