A Python receiver validates a documented HMAC signature and event schema, records accepted events in SQLite, then processes them with duplicate protection and bounded retries. The repeatable demo covers duplicate events, forged signatures, conflicting payloads, temporary failures and a permanent dead-letter outcome.