Designed so each payment moves once
Idempotency keys on every money-moving call, state machines that resume from the last committed step, and reconciliation jobs that compare the ledger to the processor. A retry is designed not to charge twice, and a crash resumes instead of leaving a payment half-done.






















































