Design an ATM

Five states with a guard on every button, a dispenser that plans notes from what is loaded (and where greedy fails), a bank with an idempotent debit and a safe reversal, and a withdrawal ordered so a jam or a lost reply always puts the money back. Plus a blocked card and a joint-account race.