- The checkout controller and how it handles concurrent requests
- The order creation service and how it manages shared state
- The point where two concurrent requests write to the same record without a lock
- Exact file and line where the missing lock allows concurrent writes
- The shared resource receiving unsynchronized concurrent writes
- Lock or atomic operation at the correct layer with the minimal change required
- Verification across all shared resources for the same exposure pattern

