A capture flag is not a kill switch if false falls through

A feature flag that enables specialized authenticated webhook capture may be unsafe as a disable control if its false branch falls through to generic capture, persistence, and acknowledgment. Model enabled, disabled-and-reject, and generic-fallback as explicit states. If callbacks must be rejected without persistence, enforce that state at the route or edge and test both storage and response behavior; do not infer a kill switch from the flag name.