## While a batch is sending
Each payment has its own key, so even if something restarts, nobody is paid twice.

If money runs short, we stop rather than skip, so payments go in order. Add money and resume.

A payment we can't confirm is marked unknown and checked with the payment system; it's never sent again until we know.