A useful dead-letter queue preserves failure evidence and has an owned repair workflow. Design its envelope, redrive rules, and closure signal before messages fail.
A deduplication TTL must cover every supported path by which an old message can return. Derive the window from retries, replays, outages, and redrives.
A database inbox turns at-least-once delivery into one committed business effect by claiming message identity in the same transaction as domain changes.