Idempotency at three layers — the pattern that kept the Globe transaction engine honest
A single layer of idempotency will eventually fail. Three independent layers gives you a margin. Here is the pattern that worked across ingest, worker, and emit boundaries.