fix: harden week-two ordering, artwork and operations

app/payments.py

@@ -33,6 +33,8 @@ def approved_quote(c, quote_id, owner=None):
         raise PaymentRefused('quote not found')
     if not row['approved']:
         raise PaymentRefused('quote was never reviewed')
+    if any(item.get('production', {}).get('version') != 2 for item in row['approved']['items']):
+        raise PaymentRefused('quote uses an obsolete production layout; request a new quote')
     if row['approved_at'] < datetime.now(timezone.utc) - timedelta(hours=QUOTE_VALID_HOURS):
         raise PaymentRefused('quote expired before payment')
     return row
@@ -94,7 +96,7 @@ def apply(c, event):
     # underpayment would ship artwork that was not paid for, and overpayment
     # means something is wrong that a person should look at.
     expected = quote['approved']['total_cents']
-    if event.amount_cents is not None and event.amount_cents != expected:
+    if type(event.amount_cents) is not int or event.amount_cents != expected:
         audit('payment_amount_mismatch', quote=str(quote_id),
               expected_cents=expected, paid_cents=event.amount_cents)
         return f'refused: paid {event.amount_cents} but quote total is {expected}'