AlphaLedger endpoints
GET /healthz: process healthGET /readyz: database/application readinessPOST /api/v1/integrations/pa/events: signed PA webhook receiver
Webhook headers:
X-PA-Event-ID: must match the envelope event IDX-PA-Timestamp: UTC ISO-8601 timestamp within five minutesX-PA-Signature: lowercase HMAC-SHA256 oftimestamp.raw_body
Required PA endpoints
GET /api/v1/integrations/alphaledger/manifestPOST /api/v1/integrations/alphaledger/installationsGET /api/v1/integrations/alphaledger/changes?cursor=...POST /api/v1/integrations/alphaledger/time-records/batchPOST /api/v1/integrations/alphaledger/pay-accruals/batchPOST /api/v1/integrations/alphaledger/reconciliation
All AL deliveries include an Idempotency-Key; PA must return the original result for duplicates.
Event IDs and idempotency keys identify effects, not attempts. Retrying the same logical event must never create a second time record or pay accrual.