When two notifications from the payment provider arrived out of order, the second one failed — and the failed attempt marked itself as handled, so the provider's retry a minute later was answered without anything being done. The charge existed on their side and nowhere on ours. A failed delivery is marked failed now, and the retry does the work.