Skip to content
Vandoko
Governance Reference

Triggered workflows

Design webhook and workflow triggers to be authenticated, idempotent, bounded, observable, and reviewable.

Triggered workflows

Required envelope

A trigger records a unique event identifier, source, timestamp, requested template, business context reference, and requesting identity.

Processing rules

  1. Verify authenticity before reading the payload.
  2. Reject replayed event identifiers.
  3. Validate the template and action against an allowlist.
  4. Apply per-run cost and credit limits.
  5. Record the evidence and resulting changes.
  6. Produce a preview before creating external Linear work or deploying.

Response behavior

Acknowledge accepted work quickly and process longer work asynchronously. Retries must not duplicate projects, deployments, or content captures.