12.20TTL / expiry

Do you store idempotency keys forever?

Maybe not.

For something like:

HTTP retry protection

you might retain them for a defined window.

But if:

orderId

is the permanent business identity, Salesforce External ID may effectively enforce uniqueness indefinitely.

Choose retention based on business semantics.