TL;DR: Count terminal notification delivery failures, query a recent window on a schedule, and notify only when a threshold crossing changes durable alert state. The metric answers an aggregate question; a Postgres row answers the equally important question of whether this worker has already announced that condition. Keep those responsibilities separate, and use a heartbeat monitor for the different failure in which the polling job never runs. For a marketplace notification service, my decisi...