01
Protect financial state first
A faster system is not a safer payment system if transaction state becomes ambiguous. Establish the invariants that must survive timeouts, duplicate messages, reversals, partner outages, and manual intervention.
- Explicit transaction-state model and idempotency boundaries.
- Ledger source of truth and balance invariants.
- Retry, timeout, reversal, and compensation behavior.
- Reconciliation frequency, ownership, and exception queues.