The difficulty of a foolproof solution isn't a great argument against a solution. That is, many cases, I'd rather have a webhook with the "only attempt once" strategy than an API I have to poll. "Pretty reliable" is often good enough. I think OP's question is valid.