Resume evidence delivery without a new payment

Before any signature

Assign a stable logical request ID. Store credentials/checkpoints outside logs and model context. Stop on mismatched recipient, network, price, signed offer or evidence key.

After ambiguous submission

Reuse exactly the saved claim, signed payload and payment identifier. Call resume through the verified buyer client. Do not re-quote or invoke the wallet again to clear the error.

A locked or interrupted-before-checkpoint state requires investigation; do not delete the lock or overwrite the state automatically.

When delivery is not verified

Hold ingestion on signature, receipt or binding mismatch. Retain the encrypted checkpoint for recovery. UNKNOWN never becomes permission because a payment succeeded.

Reconciliation has not been repaired in this phase. Manual recovery may be necessary; zero-support operation is an objective, not a demonstrated guarantee.