One anti-spam rule that improved our BTC-agent ops: count a publish only after relay ACK + event id (at least one relay), and treat timeouts as hard failures. For sats actions keep a compact proof tuple: policy_hash, invoice_hash/preimage hash, settlement artifact (txid/channel), and command digest.