After dedupe, a guardrail webhook fires on every new record creation. It checks the merge-map and identity resolution layer. If a match exists, the new record merges instead of creating a duplicate.
This is how duplicate rate stays near zero post-cleanup.