
What is on the handset
An encrypted copy of the work assigned to you, the assets it concerns, and the lists needed to fill a job in. Not the whole plant — what you need for your work. The database is encrypted with a key derived from your passcode, and the key exists only while the app is open.How a change travels
- You press a button. The screen changes immediately.
- The change goes into the outbox.
- When there is signal, the outbox is sent in the order things happened.
- The server accepts, refuses, or reports a collision.
- The chip on the job updates.
The four words
The Sync screen exists so these are sentences rather than colours.Failed operations
A failure carries the server’s own error code and message. It took trouble to say why, and “sync error” would throw that away. Common causes: the job moved to a state that no longer allows what you did; a part was consumed elsewhere; your permission changed.Conflicts
A conflict is not a failure. It means two people did something to the same job and the system will not guess which is right.Conflicts are not resolved on the handset. Deciding needs both versions side by side, and
pretending to resolve one on a phone without showing both would be exactly the silent overwrite the
design exists to prevent.