Status: OUT
`cancel()` decrements `booked` without checking for `booked >= 0`, so a double-cancel bug (if the status check were bypassed) could produce negative inventory counts.
Source: entries/2026/06/05/hotel-reservation-system-hotel_reservation.md