The agent added a row lock — but it locked after reading the balance

A real agent-generated concurrency bug: SELECT ... FOR UPDATE placed after the balance read does not serialize anything. The fix that stuck, and why adding a lock is not the same as holding a lock across the read-modify-write.