For a record upsert, the identity may be a source ID. For a payment request, it may be an idempotency key. For an email notification, the system may need a sent-event record so a retry does not send again.
The answer should be specific for each side effect. A workflow can be safe for database writes and unsafe for notifications in the same run.