12.10Where do you store processed idempotency keys?

Common choices:

Mule Object Store
database
Redis/cache
external idempotency service
downstream system's unique constraint

If Salesforce itself can enforce uniqueness using an External ID, that's often ideal because the protection sits at the actual write boundary.