Missing transactional outbox

def place_order(order): db.save(order) db.commit() message_bus.publish('order.placed', order.id) send_confirmation_email(order) # process can crash after commit, before publish Which architectural fix best guarantees downstream systems eventually learn about the order?