Writing

• Not every message deserves a queue

  Durability is a cost, not a virtue. Deciding per message type which events must survive a dropped connection and which are cheaper to throw away.

• Write to the hardware first

  A client in the field should not be able to tell the database something the physical world did not do. The ordering rule that follows from it, and the credential boundary that enforces it.