The Bug That Wasn't Where I Thought It Was: Chasing Down Duplicate Users in an At-Least-Once World

An occasional orphaned user row looked like DynamoDB read-consistency lag. It was actually Lambda's own async-invocation retry — a second mechanism stacked underneath EventBridge's, firing about a minute later on the same trace ID and creating a duplicate Cognito user for a tenant already mid-deletion