---
title: OrbitRail
description: Reliable event delivery and payload verification for product integrations.
url: https://pr-1-3b5c652a9824.thally.app/
---

# OrbitRail

Reliable event delivery and payload verification for product integrations.

## Two packages, one integration

OrbitRail provides two TypeScript packages that cover the full lifecycle of a product-event webhook: publishing it reliably and verifying it on arrival.

#### [@orbitrail/events](/delivery-policy)

    Delivery policy constants and helper functions. Encode retry windows, timeouts, payload limits, and delivery-status checks directly in your code.

#### [@orbitrail/verify](/verify-overview)

    Signed-payload verification client. Validate HMAC-SHA256 or Ed25519 signatures with configurable clock tolerance, signature age limits, and replay-cache protection.

#### [Events API](/api/introduction)

    Three HTTP endpoints for publishing events, replaying retained events, and inspecting delivery status. Browsable reference with request and response schemas.

#### [Changelog](/changelog)

    Version history for both packages, from initial release to the current delivery policy and verification defaults.

## How it works

1. Your application publishes an event to `POST /v1/events` with an `Idempotency-Key` header and a JSON payload up to 256 KiB.
2. OrbitRail accepts the event and delivers it to every registered destination, retrying failed attempts up to 12 times over 72 hours with exponential backoff and jitter.
3. Each delivery attempt times out after 8 seconds. Events are retained for 30 days, during which you can replay them on demand.
4. On the receiving side, `@orbitrail/verify` validates the signed payload before your application processes it.