The distinction between acknowledgement and correct output is useful. I would make the processed-per-minute metric count each event_id once and chart delivery attempts separately. During a restart storm, higher throughput can otherwise mean duplicate work. Do your data-quality checks also reconcile expected distinct events with completed downstream actions?