Our FR10 training-cell application occasionally misses the PLC's short inspection request, and the two owners disagree about who should clear it if we hold it until acknowledged; what should we agree before they change this ordinary job handshake, which is separate from the engineered safety functions?
Write down who writes each signal and what makes them set or clear it. Then walk one request through together, including a timeout. If both programs can clear the same request, you'll keep getting two explanations for one missed job
The joint walkthrough found both sides clearing the request under different assumptions; they have agreed single ownership and are reviewing reconnect behaviour before testing the revised interface.
Put the accepted-job identity in that review too. Holding a bit longer doesn't tell a restarted application whether it's looking at old work or a new request