provider timeout
Evidence inProvider API timeout
Controller response
Retry the provider read
Retry the read within the retry window, then escalate.
Recovery safeguards
How the controller responds when payment evidence is incomplete, conflicting, or unsafe to act on.
provider timeout
Evidence inController response
Retry the provider read
Retry the read within the retry window, then escalate.
provider rate limit
Evidence inController response
Wait and retry
Wait with exponential backoff, then retry the read.
mcp denial
Evidence inController response
Use another evidence source
Continue with official API evidence and record the MCP gap.
webhook absence
Evidence inController response
Use another evidence source
Actively fetch the provider payment and order.
duplicate webhook
Evidence inController response
Stop the current action
Suppress the duplicate inbox event and continue processing.
reordered webhook
CheckedController response
Stop the current action
Reconstruct the evidence by event time before classification.
stale read
Evidence inController response
Retry the provider read
Reject the stale observation and obtain a fresh provider read.
merchant ack loss
ApplyingController response
Verify the current state
Pause execution and verify the current state without a second update.
model failure
DiagnosedController response
Use another evidence source
Use the built-in diagnosis and record the model failure.
research failure
DiagnosedController response
Use another evidence source
Continue with cited available evidence and record the research gap.
conflicting verification
VerifyingController response
Escalate for review
Keep closure open and escalate the conflicting observations.
system restart
Evidence inController response
Stop the current action
Resume after the latest durable completed progress step.