Our tray-recovery discussion taught me to give unknown a state of its own. Now I've found the same mistake in an FR10 bracket-inspection application: startup sends every pending entry again, including one sent before a crash. I've stopped that automatic resubmission. What should the person checking these entries see?
The identified bracket and attempt, saved evidence, and what remains unknown. Plus who owns reconciliation.