Does either author describe a request received while loading is unavailable? I would start there, then agree separate names and owners for these ordinary sequence states. The machine safety conditions need their own treatment.
Ask them to trace cancellation through both ends and identify when it is confirmed. The operator needs to distinguish a cancellation request from an agreed end to the outstanding job, including an interrupted exchange.