A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is outbox worker.
Repair the outbox worker command handling implementation so it accepts first operations, recognizes safe repeats, and rejects key reuse with a different payload.
Evidence
- Affected surface: Full-stack backend focus / outbox worker.
- Observed failure family: enforce idempotent operations.
- Scope policy: region must equal eu-west.