Webhook arrives before checkout response
Why it happens
Provider processing and webhook delivery race the client request.
Potential bug
A monotonic client flow rejects a valid success or emits two receipts.
Mitigation
Treat webhook and response as facts applied to one state machine; dedupe provider event and stable payment reference.