# Design An HMAC webhook verification example using byte-exact payloads and safe comparison. The core logic is small and deterministic so an evaluator can understand and change it. Inputs are synthetic, storage is local, and there are no external service calls. Next exercise: add timestamp validation and a bounded replay window. This project deliberately omits production authentication, persistence and deployment.