Add details on atomicity of budget deductions #371
Description
Deductions from privacy budgets and safety limits need to happen atomically (all get deducted or none do). There is more detail needed to specify how this is implemented. TODO in the spec for this in the function deduct privacy and safety budgets.