A tampered client-side total, a replayed PaymentIntent, a cross-form-reused payment — here's exactly what ChargeForms checks before an entry is created.