Spot TOCTOU and check-then-act races in code

Balance checks, file existence checks, and uniqueness checks that are separate from the action are exploitable windows.