Webhook events

Subscribe a webhook endpoint to receive these events. Each delivery carries an X-PIE-Event header naming the event and an X-PIE-Signature-256 header of the form sha256=<hmac> — an HMAC-SHA256 of the raw request body keyed by your subscription secret. Verify the signature on every delivery before trusting the payload; compute the same HMAC over the raw body and compare in constant time. Delivery is at-least-once — dedupe on the delivery id.

Event	Group	Fires when
`product.published`	Product	A product version was published (or re-published) by its producing org.
`product.archived`	Product	A product was archived (soft-deleted) by its producing org.
`grant.created`	Grant	A data-access grant was created; delivered to both the granting PIP and the receiving PIC.
`grant.revoked`	Grant	A data-access grant was revoked; delivered to both sides of the relationship.
`sync.completed`	Sync	A daily catalogue sync finished for the org.
`workflow.transitioned`	Workflow	An approval-workflow instance moved to a new state.
`workflow.task_assigned`	Workflow	A workflow task was assigned (or reassigned) to a reviewer.
`workflow.task_overdue`	Workflow	A workflow task passed its SLA due time and the assignee was reminded.
`workflow.task_escalated`	Workflow	An overdue workflow task was escalated to the policy role after the grace window.