Context#

Refund APIs may not be idempotent; parallel refund and capture requests can double-credit when ledger updates are not atomic. Chargeback webhooks may be replayed if event ids are not stored.