Our coupon check timed out. After restart the application reused its job label. The acknowledgement could belong to either attempt, and the three clocks disagree. I need something firmer than sorting timestamps.
Look for an attempt or request identifier carried in both the sent request and returned acknowledgement, while keeping the application restart boundary explicit; preserve the original times rather than adjusting them until the entries appear to match.