From distributed-systems audit. cmd/api pull wiring returns nil unconditionally (cmd/api/main.go:129-132), so transient failures never redeliver — push and pull diverge. Fix: return handler error so Subscriber.ReceiveEvent NACKs transients. Document: at-least-once holds only where transport wiring permits redelivery. Small isolated PR. Priority: High.
From distributed-systems audit. cmd/api pull wiring returns nil unconditionally (cmd/api/main.go:129-132), so transient failures never redeliver — push and pull diverge. Fix: return handler error so Subscriber.ReceiveEvent NACKs transients. Document: at-least-once holds only where transport wiring permits redelivery. Small isolated PR. Priority: High.