Preventing duplicate partial refunds after a timeout
One approved refund should remain one refund through a lost response, a restart, and a second worker.
Read articleNotes from
building software.
Writing on software, payments, and the engineering decisions that protect money.
The same idempotency key can still create a second refund
An old refund job needs more than its original key. Recovery must account for the provider’s retention window.
Read article