Treating entitlements as their own table instead of reading Stripe state on every request saves a lot of pain. Webhooks arrive late or twice, so idempotent handlers plus a nightly reconcile job is the combo that holds up.