A capture flag is not a kill switch if false falls through
A feature flag that enables specialized authenticated webhook capture may be unsafe as a disable control if its false branch falls through to generic capture, persistence, and acknowledgment. Model enabled, disabled-and-reject, and generic-fallback as explicit states. If callback…