Failsafe and edge-case pathways

Duplicate bid submission

Same bid received twice merges by id

Depends on: LOGI-0001

Duplicate job post across channels

Same job arriving via QR, Bluetooth and relay deduped by content hash

Depends on: LOGI-0001

Conflicting accepts while offline

Both accepts kept; deterministic winner; loser notified

Depends on: LOGI-0001

Clock skew between devices (jobs)

Use HLC ordering and show skew warnings

Depends on: LOGI-0001

Phone clock manually wrong

Detect implausible clock and block signing until corrected or flagged

Depends on: LOGI-0001

Double assignment of a driver

Overlap detection and override flow

Depends on: LOGI-0001

Double assignment of a vehicle

Overlap detection and override flow

Depends on: LOGI-0001

Job accepted after poster cancelled (race)

Tombstone wins if signed earlier; otherwise explicit conflict resolution

Depends on: LOGI-0001

Handshake interrupted at pickup

Resume without double-posting

Depends on: LOGI-0001

Handshake interrupted at delivery

Resume or fall back to code/printed proof

Depends on: LOGI-0001

Receiver phone dead at delivery

Printed QR and code-based confirmation later

Depends on: LOGI-0001

Driver phone dead mid-route

Backup device or paper waybill; resume from backup

Depends on: LOGI-0001

Lost driver phone

Restore from backup, revoke old key, reassign job

Depends on: LOGI-0001

Stolen phone with open jobs

Key revoke notice and job reassign

Depends on: LOGI-0001

Key rotation mid-job

Rotation notice linked; open jobs continue with continuity proof

Depends on: LOGI-0001

Rating key lost without backup

Rebuild reputation by re-requesting attestations; show reduced verification level

Depends on: LOGI-0001

Attestation arrives after key rotation

Accept via continuity chain

Depends on: LOGI-0001

Tampered job file

Reject with explanation

Depends on: LOGI-0001

Unknown relay serving bad data

Verify signatures; ignore relay that serves invalid records

Depends on: LOGI-0001

Poster disappears after accept

Driver marks "unreachable"; neutral record; job closes without score change

Depends on: LOGI-0001

Carrier disappears after accept

Poster reopens job; no negative mark; absence of attestation

Depends on: LOGI-0001

Goods differ from description at pickup

Refusal flow

Depends on: LOGI-0001

Price dispute at delivery

Compare job agreement snapshot

Depends on: LOGI-0001

Cash short at delivery

Record shortage; dispute

Depends on: LOGI-0001

Counterfeit bills note

Record and flag counterfeit cash; guidance

Depends on: LOGI-0001

Partial delivery then job split

Remainder becomes follow-up job

Depends on: LOGI-0001

Route blocked mid-trip

Re-route and update ETA

Depends on: LOGI-0001

Regional rule changes mid-trip

Update regulation pack notes

Depends on: LOGI-0001

Power loss during handshake or signing

Atomic save and resume

Depends on: LOGI-0001

Storage full on device

Block new jobs, protect existing; guide cleanup

Depends on: LOGI-0001

Overlay database corruption recovery

Restore from local backup/WAL? recovery

Depends on: LOGI-0001

Version mismatch between peers

Negotiate lowest common format

Depends on: CONN-0148, LOGI-0001

Large bulletin overflow

Chunk and prioritise

Depends on: LOGI-0001

Time-zone and daylight edge cases

Store UTC plus offset

Depends on: LOGI-0001

Name change / rebranding of party

Signed name-change record linking old and new

Depends on: LOGI-0001

Duplicate identity creation by same person

Warn and offer merge

Depends on: LOGI-0001

Job posted in wrong currency

Currency correction flow

Depends on: LOGI-0001

Unit-of-measure confusion (bultos vs kg)

Warn on suspicious unit ranges

Depends on: LOGI-0001

Negative or zero price entry

Validation

Depends on: LOGI-0001

Past-dated windows

Validation

Depends on: LOGI-0001

Overlay uninstall / disable safe state

Disabling overlay keeps data and open jobs resolvable

Depends on: LOGI-0001