Blog

How we bill each event exactly once

A retry can never double-charge and a crash can never charge without storing: our ingest worker commits the free-tier meter and the idempotency checkpoint in one DynamoDB transaction, and every crash-recovery path falls out of that one field. The full pattern, the eight-scenario table, and the tests that pin it.