A clean process restart is not the same thing as a safe job restart. An agent can recover its queue, reload its state, and report healthy while still replaying a side effect that already happened before the crash. The dangerous gap is usually between “the worker sent the request” and “the durable state store recorded the result.” This article turns that gap into a small, testable protocol. The false promise of exactly once Most agent runtimes can usually provide one of thes...