Does your model handle the possibility of a user receiving the same notification multiple times? IOW, are user notifications idempotent? In the presence of failure it is possible for the same event to be sent twice. This is a property of remote listeners and continuous queries (which are based in remote listeners).
this is not a problem for us if we receive the same notification twice.