See PHI381. An install reported some duplicate mail. Although it looks like Phabricator was in the clear, including an X-Phabricator-Mail-ID header (with the MetaMTAMail object's ID) and an X-Phabricator-Unique (with a random hash generated per-send-attempt) could have helped narrow this down.