HTTPS endpoints receive HMAC-signed events. Three retry attempts with backoff, then DLQ. Each delivery is logged and can be replayed.