- StatusCatalog gains an Unresolved state and a PRECEDENCE order
(Pending -> Unresolved -> Failed -> Success -> Paid); canTransition only
allows moves up it, so a callback and a status query racing each other
cannot make the status flap. A refused transition still stores the row.
- PaymentInitiation carries a @Version optimistic lock; callback and query
paths go through blockingWithRetry, which replays the losing unit of work
once instead of dropping it.
- Reconciliation runs two passes per tick, stale first: anything Pending past
payments.reconciliation.stale-age (3h) is marked Unresolved with
resolvedBy = EXPIRY, then anything past pending-age (now 3m) is re-queried.
- Explicit lowercase @Table names on the entities that were relying on
derived naming.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
