Check an agent-built Stripe webhook before it goes live
Your task
An agent built the Stripe webhook that tops up customer wallets in your Python FastAPI app. When a payment_intent.succeeded event arrives, it checks the signature, skips events it has seen before and adds the payment to the customer's wallet balance. It took one afternoon. The pull request has 14 passing tests, and the agent wrote all of them.
You approve what goes live on Monday.
What do you check before it handles real money, and what would make you hold it back?
It covers
- Webhook receiver
- Signature verification