Webhook payload

This is the JSON body delivered to your webhook_url for each matching event.

Headers

Header	Value
`Content-Type`	`application/json`
`X-AIActRadar-Signature`	`sha256=<hex digest>`
`X-AIActRadar-Event-Id`	e.g. `evt_…`
`X-AIActRadar-Delivery-Id`	e.g. `dlv_…`
`X-AIActRadar-Attempt`	`1` – `6`
`X-AIAR-Disclaimer`	`informational-only-not-legal-advice`
`User-Agent`	`AIActRadar-Webhook/1.0`

Body

{
  "id": "evt_2026_0427_001",
  "type": "guidance",
  "source": "aioffice",
  "topics": ["gpai", "transparency"],
  "severity": "medium",
  "title_en": "Updated GPAI Training Data Summary template v2.1",
  "title_de": "Aktualisiertes GPAI-Trainingsdaten-Zusammenfassungs-Template v2.1",
  "summary_en": "AI Office released revision 2.1 of the public template providers must use to summarise training data under Art. 53(1)(d). Adds fields for synthetic data sources.",
  "summary_de": "Das KI-Buero hat Version 2.1 des oeffentlichen Templates veroeffentlicht…",
  "diff_to_previous": "Section 4 (synthetic data sources) added; section 6 reformatted.",
  "url_official": "https://digital-strategy.ec.europa.eu/...",
  "ai_act_articles": ["Art. 53(1)(d)"],
  "published_at": "2026-04-27T10:00:00Z",
  "ingested_at": "2026-04-27T10:08:14Z",
  "language_versions": ["en","de","fr","it","es"],
  "delivery": {
    "id": "dlv_…",
    "attempt": 1,
    "subscription_id": "sub_…"
  },
  "disclaimer": "Information only — not legal advice."
}

Field reference

Field	Type	Notes
`id`	string	Stable across retries.
`type`	enum	`guidance \| standard \| consultation \| enforcement \| national \| court \| meta`
`source`	string	One of our 12 source IDs.
`topics`	string[]	From the topic taxonomy.
`severity`	enum	`info \| low \| medium \| high \| critical` — see classification.
`title_de` / `summary_de`	string?	Present when subscription `language` is `de` or `both`.
`diff_to_previous`	string?	Set only when this is a versioned update (i.e. existing `external_id` changed).
`ai_act_articles`	string[]	e.g. `["Art. 53(1)(d)", "Annex IV"]`. Extracted by LLM from source.
`delivery.attempt`	integer	`1` on first attempt, increments on retry.

What you should do with it

Verify the HMAC signature before parsing — see signature verification.
Acknowledge with HTTP 200 within 10 seconds. Process async.
Store delivery.id and id for idempotency.
If you forward content to humans, carry the disclaimer.