Idempotency, so a retry never pays twice
Every payout request accepts an idempotency key. If your service times out and retries, or a deploy replays a queue, the second request returns the original result instead of sending the money again.
This is the single most important property of a payout API and the one most often missing. Double-paying a vendor is recoverable. Double-paying two thousand of them is a very bad week.