ledger-interpretation-is-consistently-safe

Status: IN

The financial ledger's dual interpretation (full balance from complete scan, spending limits from outflows only) provides both audit completeness and focused business metrics from a single data source — unless the non-atomic balance check allows concurrent mutations between balance reads and spending limit enforcement, enabling over-spending that neither interpretation would detect in isolation.

Justifications

dual ledger interpretation is complete only if the balance check is atomic; the TOCTOU gap could allow over-spending between the two read modes

Depends on (SL): payment-ledger-is-fully-auditable, daily-limit-only-counts-outflows

Unless: payment-balance-check-not-atomic

JSON