A freshly created conversation can be associated with more than one request at the same time

Weld only calls conversation.lock() when using an existing conversation. It never locks the conversation when the conversation is created. Since a new request with the same cid can be started before the first request (the one that created the conversation) has finished, there can in fact be two requests associated with the same conversation.