CART-026

A requirement the spck.dev suite checks on UCP servers. The quoted text is the normative requirement; the citation links to the exact line of the pinned spec source it was taken from.

When an Idempotency-Key is provided, the server MUST store the key with the operation result for at least 24 hours, return the cached result for duplicate keys, and return 409 Conflict if the key is reused with different parameters
Keyword
MUST
Area
Cart
Versions
2026-04-08
Testability
needs a receiver the suite controls, so it runs in the CLI/full suite
Spec source
ucp:docs/specification/cart-rest.md#L473 2026-04-08

How this is graded

A deviation on a MUST fails the run and shows the requirement next to the actual response. Checks the suite cannot validate soundly are reported inconclusive or not-tested — never a silent pass. The full verdict semantics are on the grading rubric.

Run it against your store

The hosted check covers the read-only surface; the CLI and GitHub Action run the full suite, including this check when your store declares the capability it belongs to.