Everything resolving a webhook's session can come back as: the session;
"skip" to acknowledge without processing; "retry" to answer with the fixed
retryable refusal; a rejection carrying a paid charge the boundary could
not read; or null for an event that is provably not ours.