AI Prompts

Design a webhook receiver that verifies signatures, survives at-least-once retries, and cannot double-charge or double-provision when the vendor replays events.

Review an HTTP handler for broken object-level authorization, then return exploit steps, a minimal patch, and tests that fail if IDOR returns.

Produce endpoint docs with auth, request fields, response examples, and error codes that a developer can paste into a README without guessing.