Preventing duplicate partial refunds after a timeout
One approved refund should remain one refund through a lost response, a restart, and a second worker.
Read articleWhen software
moves money.
Engineering notes on financial controls, recovery, and the evidence behind software changes.
The same idempotency key can still create a second refund
An old refund job needs more than its original key. Recovery must account for the provider’s retention window.
Read article