billing

Idempotent Credit Ledgers for Refund-Then-Recover Retries

A failed job gets its credits refunded. Then a retry succeeds. Reclaiming them without double-charging needs an idempotent ledger and atomic guards.