Webhooks

damrs posts a signed JSON event to each endpoint when an asset changes. Events carry ids, never bytes: a receiver reads the asset through the API with its own credential, so withdrawing rights takes effect downstream instead of being cached somewhere it cannot be undone.