Duplicate Webhook Events Were Creating Extra Orders in Production

Problem We had a checkout incident where a payment webhook retried after our handler took too long to respond. The first request actually created the order, but the response hit a timeout on the provider side. A minute later the same event came back, our worker treated it as a fresh checkout, and two orders landed in the OMS for one payment. At first it looked like a frontend double-click…