Function DeterministicProtectionEventID

internal/identity/screening.go:57–60

DeterministicProtectionEventID derives a stable id from the dedupe key (message + source + reason + detector) so that re-screening the same message — e.g. an MTA-retried inbound delivery — inserts the SAME row via ON CONFLICT DO NOTHING instead of a duplicate. Mirrors webhookpub.DeterministicEventID

(messageID, source, reason, detector string)

// an MTA-retried inbound delivery — inserts the SAME row via ON CONFLICT DO NOTHING
// instead of a duplicate. Mirrors webhookpub.DeterministicEventID.
func DeterministicProtectionEventID(messageID, source, reason, detector string) string {
	h := sha256.Sum256([]byte(messageID + "|" + source + "|" + reason + "|" + detector))
	return "scr_" + hex.EncodeToString(h[:16])
}

// CreateProtectionEvent appends a screening event. The insert is idempotent on the
// primary key: callers that set a DeterministicProtectionEventID get exactly-once