Transactional Outbox Pattern

Cron drops to a recovery trigger once the outbox owns the notification intent

You cannot commit a database row and an SMS carrier together, so the workable shape is one durable intent per channel, a leased worker, and a dedup key every retry reuses unchanged. The poller stays, with a smaller job.