An alarm is firing, but the on-call email never arrives. What should be investigated?

1. Only the metric threshold, because delivery cannot fail independently.
2. Notification topic configuration, confirmed subscription, delivery status, and relevant permissions.
3. The subnet's DHCP lease duration as the notification address.
4. The application's container image size.