交付跟踪：交付与运营
在硬退信或垃圾邮件投诉后抑制收件人，区分临时失败，遵守 List-Unsubscribe，并且绝不对被抑制的地址重试投递。
Event streams roll into digest batches keyed by recipient and channel, with deduplication, cutoff schedules, partial-failure isolation, and idempotent send tokens so duplicate workers cannot deliver the same digest twice or drop unreadable aggregates silently.