Where it usually breaks
And how to keep it from happening.
- Acceptance after expiry. The protected action must refuse an offer beyond its validity window.
- Unavailable connection. Pending remains the correct handoff outcome until the order system supplies evidence.
- Repeated transfer request. Inspect the existing receipt before retrying so the team retains the same operation identity.