An Uncertain Hand-off Waits Out a Fifteen-Minute Window

Context

A provider can accept a message before Platform records the acknowledgement.

Decision

Both pipelines protect a fifteen-minute ambiguity interval, but staff notifications fail uncertain sends while association mail may submit them again.

Alternatives Considered

Immediate resubmission risks duplicating a provider-accepted message. Waiting indefinitely leaves unresolved delivery without an operational end state.

Consequences

Nightly notification repair records ambiguous failure without resending. Communication recovery can close an old attempt unknown and open a new one. Product authority for the different risk policies remains unresolved.