Bug fix

Inline path

Fix: a payment retry after a timeout, with the same idempotency key, must not create a second charge. Verify with npm run test:integration -- payment-timeout-retry.

Reproduce before and after:

npm run test:integration -- payment-timeout-retry
1 failed before the fix
1 passed after the fix

This local fix needs no artifact. The bug is enough paperwork.

Escalation

The idempotency lookup is also shared by settlement reconciliation. That wider blast radius earns a working spec at ~/.agents/artifacts/payments-api/payments-spec.md:

### AC-003 - Retry is idempotent after timeout
- When: a payment request times out and the client retries with the same idempotency key
- Then: the payment service MUST NOT create a second charge
- Verify with: `npm run test:integration -- payment-timeout-retry`

## Non-goals

- No change to idempotency-key format.

One requirement and one worker still need no task. Record changed files, red-before-green output, and blockers under the spec's ## Execution.

Review

A non-implementer opens the native PR, reruns the command, and judges AC-003 against the fresh output. No Suspec review file.

suspec check ~/.agents/artifacts/payments-api/payments-spec.md

The checker validates spec shape. It does not decide whether a money-path finding is acceptable. The human does. The implementer cannot accept.

Preserve the verified shared-lookup lesson through native memory when useful. Then close the transient set.