Buildkite's webhook guide describes the signature timestamp as HTTP dispatch time. In a Buildkite receiver, use it for its documented verification purpose, not as a substitute for the event's own time.
Preserve event and receipt timing separately when investigating delayed delivery.