Notification Delivery Audit

Goal and scope

Audit one notification delivery boundary across email, SMS, push, in-app, webhook, or provider delivery status. Focus on correctness, consent, deduplication, retries, localization, observability, and user-visible state.

Domain invariants

• Notification eligibility, consent/unsubscribe, locale, template data, and channel selection are owned and tested.
• Delivery side effects are idempotent and not duplicated by retries, job redelivery, or concurrent triggers.
• Provider errors, bounces, suppressions, rate limits, and webhooks update local state intentionally.
• Sensitive data in templates, logs, and provider payloads is minimized and safe.
• Critical notifications have observable delivery/failure paths and manual recovery where required.

Audit method

Trace the selected notification from trigger through eligibility, template rendering, queue/job, provider adapter, status webhook, user preferences, logs, UI state, and tests.

Choose a synthetic event/recipient/channel and a normal delivery control. Trace the same logical operation across duplicate triggers, ambiguous sends and status events, using the notification class's actual consent/eligibility policy. Pass the first wrong eligibility/effect/status transition and expected observation to Improve Notification Delivery. Keep provider acceptance and confirmed delivery distinct.