Outcomes and AMBIGUOUS

import ctrlrun
from ctrlrun import Control, InMemoryStateStore, Policy

policy = Policy.from_yaml("""
schema: ctrlrun.policy/v2
actions:
  stripe.refund:
    effect: "refund:{payment_id}"
    decision: allow
""")
control = Control(policy, InMemoryStateStore())
calls: list[str] = []


@ctrlrun.protect("stripe.refund", effect="refund:{payment_id}", control=control)
def refund(payment_id: str, amount: int) -> dict:
    calls.append(payment_id)                      # the money has moved by now
    raise TimeoutError("no response from api.stripe.com after 30s")


with ctrlrun.context(agent="refund-agent"):
    try:
        refund(payment_id="txn_1", amount=50000)
    except TimeoutError:
        pass                                      # the agent's framework sees an error and retries
    try:
        refund(payment_id="txn_1", amount=50000)
    except ctrlrun.AmbiguousEffect as blocked:
        print("retry refused:", blocked)
    else:
        raise SystemExit("the retry ran; the customer was refunded twice")

print("remote refund calls:", len(calls))