idempotency

Design response automation when a remote action may have succeeded despite a lost reply. Preserve target identity, approval scope and audit evidence while reconciling the result.

Design a refund ledger that handles authorization, concurrent reservations, distinct partial refunds and uncertain provider outcomes. A stable retry key helps, but does not enforce the business budget.