Unsigned webhooks die before your handler wakes

Every guide says to verify webhook signatures. Every codebase has one handler that skips it: the one written at 6pm before a launch.

On Hoody the verification moves out of the codebase entirely. A proxy hook matches POST /webhooks/*, and a twenty-line script checks each Stripe signature against the shared secret before anything else happens. Valid payloads forward to your handler with one call. Invalid ones get a 401 and a log line, and your application code never runs.

Nobody has to remember to verify, because the handler only ever meets requests that already proved themselves.

The unsigned payload dies at the door, not in your code review.