factory_resolve_dead_letter
OWNER-ONLY. Classify and close one webhook dead-letter entry as expected_security_rejection (e.g. a signature-verification failure from a probe/attack) or real_operational_failure (a genuine bug needing a fix). Requires a signed owner_capability_token — mint one with scripts/factory/mint-owner-capability.mjs (VPS-only, requires the real trust signing key). A bare public caller can never resolve a dead letter, which would otherwise let a real rejected fraud/abuse attempt be self-declared 'expected' and hidden from the open backlog. Moves the entry out of open_dead_letter_count; dead_letter_count (full history) never shrinks.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| note | No | Optional free-text context for the classification | |
| classification | Yes | Why this dead letter happened, as judged by the owner | |
| dead_letter_id | Yes | The fdl_... id from factory_health/receipts | |
| owner_capability_token | Yes | Release-bound, single-use, short-lived token signed with SaSame's trust key, minted for the dead-letter-resolution audience |