# Approval Agent Recovery Drill

Run 30 minutes with the operator, approver, and engineer. No production access required.

## Scenario 1: duplicate request
- What is the dedupe key?
- Who sees the duplicate flag?
- What is the decision and the record?

## Scenario 2: timeout after the effect
- How do you query authoritative state?
- What is the idempotency key and where is it stored?
- Who may authorize a second attempt?

## Scenario 3: partial success
- Which step is confirmed?
- How do you resume without repeating it?
- Who owns the handoff?

## Scenario 4: wrong vendor or bank details
- How is the change detected?
- Which known channel confirms it?
- Who can pause the workflow?

## Pass condition
Every participant can answer "what do I do next?" from the record alone.