One Seat, Two Buyers: Race Conditions, IDOR and Keys in a Cinema Booking System

Seat G7 at the 9 PM show. Two people have it open on their phones. Both tap it, both see it turn yellow, both press Confirm within the same half-second. Exactly one of them should get a ticket. The ot