If I were setting this up for a grocery delivery platform, I would require the delivery address be provided upfront to enter the queue. Validate and standardize the address using the official Postal Service API (in the US). Prohibit changing the delivery address once in the queue, and prohibit the same address from appearing in the queue multiple times. Those requirements eliminate the mechanical possibility and incentive to partake in any sort of hoarding or profiteering using bots.