Why refund processing is harder than it looks
Refunds as an explicit, auditable state machine: row-locked over-refund prevention, idempotency done right, hostile webhooks, an incident that nearly double-paid 12k customers, and reconciling the settlement file because money is the error budget.
Apr 3, 2026 · 21 min read