Idempotent consumers or it didn’t happen. If reprocessing the same event twice corrupts your read model, you don’t have a queue, you have a loaded gun pointed at your data pointed by every network blip.