This letter / 01
Clarity must travel beyond the connection
An interrupted connection creates uncertainty about a message. It should not silently create a second financial event or transfer the investigation to the borrower.
A field officer presses submit, the connection disappears and the screen offers no clear answer. The officer wants to finish the task, the customer wants a receipt and the branch wants the day's records reconciled. Repeating the action seems sensible. Whether it is safe depends on what happened before the connection failed and how the application represents a retry. This is an ordinary design problem with an unusually direct human consequence. The customer cannot be expected to understand our message flow before knowing whether the payment record can be relied upon.
