A change-feed consumer writes to an external system. What property should its processing logic have to handle possible repeated delivery safely?

1. Delete all checkpoints after every event
2. Assume each change can never be delivered twice
3. Apply external writes before checking tenant authorization
4. Idempotent or deduplicated handling based on a stable operation identity