Idempotent by design
Verification upserts, it never duplicates
Apple receipt verification keys off the purchase's original_transaction_id. Re-verifying the same purchase, or a renewal coming back around, updates the existing row instead of creating a second subscription.
- Account-binding check rejects a receipt replayed against a different account
- Superseded purchases are marked explicitly, so entitlement for a product is never ambiguous