The webhook returned raw signature-lib / Postgres error text to the caller (signature verify is reachable unauthenticated). Now returns generic 'Invalid signature' / 'Webhook processing error' / 'Webhook handler error'; the real detail is console.error'd server-side so debuggability is kept. Stripe only acts on the HTTP status. 532 tests.