GeezerVison

🟡 Changes recommended

The change still has two critical active issues: guest duplicate submissions remain possible because they lack server-side transaction state, and the locking approach is not atomic on supported non-transactional table engines.

_{Review effort: Lite}

🟡 Changes recommended

A moderate active finding remains because the test does not reproduce the concurrent double-submit or exercise the transaction re-read branch, so it can pass against the old implementation.

_{Review effort: Lite}

🔵 Needs a closer look

The fix depends on row-lock and transaction semantics across phpBB’s supported database drivers, and the race lacks automated concurrent coverage, so human validation across those engines is needed.

No open issues 🎉

_{Review effort: Lite}