The receiver of a payment must wait an hour or so before believing that it's valid. The network will resolve any possible double-spend races by then.