ADR 0031: the API fans outbox events out into delivery jobs, and apps/delivery, a Go service, sends them from a Postgres queue with leases, jittered retries, send-time signing and an SSRF guard. Redis pub/sub and holding a transaction across the send are rejected.