Bypass-proof per-identity purchase limits for limited drops on Shopify. Two enforcement layers (a checkout Validation Function plus post-purchase reconciliation) close the cart-edit, guest, and email-alias bypasses incumbents leave open.