One case I would add before paper trading: the broker accepts an order, but the HTTP response is lost. Retrying with a fresh order ID can create a second position. Reuse the original ID and reconcile the broker's order state before submitting again. A useful test is to restart the receiver after that timeout, then replay the same alert. Does your planned webhook piece cover recovery across a restart as well as duplicate alerts within one running process?