Define the closeout trigger carefully
A status change can mean different things in different teams. “Closed” may mean work has ended, billing is complete, or the matter has entered an administrative review. The integration needs an explicit event and meaning.
I would use a “prepare closeout” transition that creates a review record without deleting files or changing permissions. That makes the first step reversible and lets the team inspect missing information before taking consequential actions.
Record the matter identifier, requesting person, trigger time, and source status. If a duplicate event arrives, attach it to the existing closeout case. A repeated webhook should not create competing checklists that different staff members complete independently.
Also define what happens when a matter reopens. A stale closeout process should not continue removing access after the source system has returned the matter to active work.