Ah, so the lock is initiated by the mint, not on the user’s Cashu client? Cause I was wondering how to prevent double spending.

It's initiated by the sending user but it's enforced by the mint.