CDC makes dual-writes retryable, but destinations still can't survive a second write
A new paper pushes back on CDC hype: it durably records and replays the fan-out, fixing silent divergence, but destinations still need idempotency or duplicate rejection to be safe on redelivery. A retried index upsert is harmless; a retried email is a duplicate. The incidents just move downstream.