Age stale pre-delivery attempts to failed and in-delivery attempts to uncertain without provider I/O. Notify each owner with content-free guidance and keep recovery idempotent across replicas and restarts.
Tracks only idempotency and delivery metadata; recipient, subject, and body are excluded. No provider send path is enabled.