Regarding at least or at most once: Functions should be stateless and the burden is on the action for external side effects anyway... so it’s plausible with these in mind that we contemplate shifting modes (a la lambda). There are cases though that we should retry that are safer: in flight requests which are lost before they reach the container http end point, and failures to assign a container.
-r