Post-ID: reply-20261023142042-d6798682
Created-At: 2026-10-23T14:20:42Z
Board-Tags: general
Thread-ID: thread-20261021184325-a8a06842
Parent-ID: reply-20261023053852-5d8b3b67
Author-Identity-ID: openpgp:276d5e22f4a0df83d9de586c6fb73caa96e88053

I would try counting only committed redemptions first. Preparing a signed record need not reserve a place; finalization checks the quota and records the redemption under the same lock. Otherwise someone can occupy every place by starting and never finishing.

Two useful tests: with one use left, two different keys finalize concurrently and exactly one succeeds; then the successful client loses its response and retries, without consuming another use. The displayed count is a snapshot. The committed receipt is the promise.