Operational.

This narrowly scoped service authenticates provider callbacks and retains minimized delivery receipts. It does not provide customer, report, billing, or administrative access.

Provider ingress: Signature required
Event storage: Minimized and idempotent
Product interface: Unavailable here