payment-idempotency

name	payment-idempotency
description	Review payment capture, refund, and settlement code for retry safety and duplicate-processing risk.

Payment Idempotency

Review standard

For payment capture, refund, and settlement paths, verify that idempotency-key handling is preserved across retries.

Flag changes that:

• remove idempotency-key validation from money-movement endpoints
• allow a retry to capture or refund the same payment more than once
• store capture results without binding them to the request idempotency key
• emit duplicate settlement events for the same successful capture

Findings should identify the endpoint or worker path, explain the duplicate-processing risk, and prefer a concrete guard over a generic warning.