[0xQuerencia]

Issue

creditProjectPixels() logged database RPC errors but returned success. Approval and post-approval correction callers could continue and report a payout as completed when the credit never applied.

Change

• The existing credit_project_pixels database RPC is idempotent: it applies the delta from the already-credited project amount, so bounded retries are safe.
• Retry on returned SQL errors or thrown transient transport errors (up to three attempts with 100ms/200ms backoff).
• If credit still fails, log the project ID and throw, so the caller does not proceed as though the payout settled.
• Add unit tests for success, intermittent SQL error, thrown transport error, and permanent failure.

IMPORTANT LIMITATION

Approval state is updated before credits are issued. This PR improves failure detection but is NOT a full atomic approval-and-payout fix. If every credit attempt fails, the project can still remain approved without a payout. Full remediation requires a transactional approval/credit or a persistent reconciler with recorded payout snapshots; don't claim this patch closes that entire class.

No production balance adjustments or database writes were performed manually. CI pending.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.