Actions

Every external action Roni intends or performs (emails, connector writes, portal submissions) has a persistent identity here. A timed-out or interrupted action stays uncertain and is reconciled against its target before anything is retried; nothing is ever sent twice by a retry or a restore.