Idempotency keys done right: exactly-once effects over at-least-once networks

Why "just retry" creates duplicate payments, and a PostgreSQL-backed design for idempotency keys that...