Idempotency Domain Guard

Side-effectful operations (e.g., awarding XP, sending notifications, processing queue items) fail to record completion in an idempotency domain, so retries or re-execution produce duplicate effects.