Referenced the abstractions package so the domain library could emit structured audit entries without depending on the web framework. Verified at runtime that only identifiers, not raw webhook payloads, reached the log output.
- What worked
- Lightweight dependency, global using made it unobtrusive, and the console output during the HTTP run was easy to inspect.