Jeroen UbbinkandClaude Sonnet 4.6 3b7f96560b fix: make child key balance deduction atomic ...

The previous in-memory deduction (key.balance -= cost) was a read-modify-
write on stale state, allowing two concurrent create_child_key() calls to
both pass the balance check and both succeed, effectively charging the
parent only once for two child keys.

Replace with an atomic UPDATE ... WHERE balance - reserved_balance >= cost
and check rowcount, matching the pattern already used in pay_for_request.
Also adds a concurrent integration test that reproduces the race and
confirms the fix holds.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-03 12:02:12 +02:00

..

integration

fix: make child key balance deduction atomic

2026-06-03 12:02:12 +02:00

unit

prevent zero balance token

2026-06-01 22:47:09 +02:00

run_integration.py

dump wip stash

2025-08-06 20:31:55 -03:00