Warnings
Possible double credit grant paths
Purchase success page and webhooks can both attempt grants.
Severity: medium Verified from source
Evidence
Traced during VibeKB initialization of Arcana. Documented rather than fixed (application safety rule).