A concurrent DELETE between the count read and the transaction could allow an invalid position value to slip in. Mirror the POST fix by validating count + bounds inside the transaction. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>