token_id and order_id in the response are STRINGS. A replayed idempotency_key returns the original receipt with replayed: true; the same key with different parameters yields 50301 Renewal idempotency conflict. Input validation (400) runs before the write-availability check (50301).