PNotify

What protects the pipe

A notification service holds the keys to people's inboxes and phones; it should be strict about who may use it.

Callers present a Bearer API key; the PCall webhook has its own secret.

PCall messages and voice are end-to-end encrypted between the bot and the CalixOne app.

The backup passphrase comes from the environment or a file, never from command-line arguments.

Every delivery ends as delivered, failed or dead with a reason you can read.

Delivery is at-least-once: a send that succeeded but could not be recorded may be sent again.

One Go binary and PostgreSQL; channels you do not configure are not even loaded.

Make every alert reach someone

Tell us who needs to be notified, about what, and how quickly.