I question any amount of guarantees around "one message" anything. There might be this guarantee per actor, but you have no such guarantee per system. And, assuming a real system, this will be a problem.
So, you get to pick, "at most once" or "at least once." And then you need to build your system to act accordingly.