Your Stripe webhook returns 200 OK and does nothing. Here's the 15-minute test before your first paid user
Harsha Vardhan audited three indie SaaS products built with Cursor this month. All three had the same silent billing bug. The webhook handler caught the Stripe event, logged it, returned 200 OK, and then did nothing. Stripe marked the event delivered and moved on. No access was revoked, no subscription