So this will catch things it most of the time, but you could get two carts in race conditions. In which case it would never be able to recover. A database unique constraint on `(user_id, status)` might do it, though I assume that would have negative effects on non-carts. You could also just do a filter for it and return the most recent if there's an extra.