Idempotent API design: how idempotency keys keep money and data safe

Networks retry, and without idempotency a retry means a double charge or duplicate record. How to design idempotent APIs with idempotency keys — storage, scoping, response replay, concurrency.