The fix the author adopted is: keep the ring buffer and add a fingerprint mechanism—compute a fingerprint for each payload (a composite hash of the body hash plus selected headers), maintain a "seen fingerprints" set, and when full, prioritize evicting entries with duplicate fingerprints, only touching unique events when there are no duplicates to evict.