[senderista]

That doesn’t sound like “at-most-once”. What if your consumer crashed after processing the message but before committing the offset?

[aarbor989]

This is a fair thing to point out. For us the “at-most-once” guarantee was based on committing. Luckily our processing was idempotent so in the rare case of the above scenario it wouldn’t cause any duplication