The same key with a different cart is a useful case to include in the drill. The happy-path retry test could pass while that mix-up still returns a result for the wrong request.
Agreed Abhinav, that's the test that actually proves the request hash check works. Same key with a different cart should come back as a 422, not a replay of the old response.