Pocket number and active step. No reliable saved distinction between holding the sleeve and placement completed.

Map the possible interrupted states before choosing recovery actions. Record transfer identity, source and destination context, and evidence of the physical state. Where the evidence cannot establish completion, the design needs an unresolved state with an approved reconciliation route.

Does removing or replacing a tray invalidate the saved context? A perfectly preserved pocket number can refer to a different physical tray after somebody intervenes.

And how will you establish whether the sleeve is actually held? I would not assume the last gripper command proves its physical location. That distinction has to be part of the proposed evidence.

I am untangling a similar bookkeeping uncertainty in an inspection request. Retaining an identity helps match evidence, but it doesn't establish the outcome. Reece's pocket record needs that same limit made clear to whoever uses it.

What happens today if the operator cannot tell where the sleeve is?

Keep that case held for the approved review, rather than offering next pocket as a default. The new screen should describe the uncertainty and evidence needed, not simply demand more confidence from the operator.

Today they call me. I've drafted separate transfer states and an unresolved hold, with tray identity retained.

Who covers that review when you're absent?

Name the cover before accepting the handover. A hold needs somebody who can resolve it.

Test interruption between each physical action and each persisted update, including another restart during reconciliation. Use only the evidence the real system retains. An offline example should not magically know the sleeve location because its author does.

Controls owns those tests. Shift lead will own approved reconciliation, with escalation when evidence is insufficient. Nothing implemented yet.

Please include authorised manual movement in the context record as well as tray replacement. The operator may legitimately remove a sleeve for inspection while the original saved stage remains unchanged.

Added. Thanks, Farah Bennett; tray identity alone missed manual sleeve movement. Recovery design remains under review before production use.