Modeling Double-Entry Accounting in Go: Types That Make Invariants Impossible to Violate

If a transaction that doesn't balance can't even be built without the compiler and a tiny Validate method noticing, a whole category of money bugs just stops existing