{
  "source_fact_boundaries": [
    "transactional outbox stores publish intent with local domain change",
    "local database transaction atomicity stops at the local database boundary",
    "downstream duplicate handling remains a separate consumer concern"
  ],
  "forbidden_conclusions": [
    "transactional outbox guarantees exactly-once delivery or exactly-once downstream effects",
    "successful database commit proves the broker received the event",
    "relay retry cannot duplicate delivery",
    "clean reconciliation proves all downstream effects completed",
    "green local fixture proves production reliability",
    "the same event_id may silently alias divergent aggregate or payload across relay attempts"
  ],
  "required_case_semantics": {
    "baseline_transactional_outbox_commit": "DOMAIN_AND_INTENT_COMMITTED",
    "direct_dual_write_publish_failure": "DUAL_WRITE_GAP_OBSERVED",
    "relay_publish_before_mark_crash_retry": "DUPLICATE_DELIVERY_CANDIDATE",
    "reconciliation_old_pending_intent": "STUCK_INTENT_DETECTED",
    "evidence_field_removed": "EVIDENCE_INCOMPLETE"
  }
}