Worked example: moving a visit without accidentally cancelling it
A fictional customer, Sam Example, has a confirmed appliance visit at 9 am on Thursday. The approved service rule permits a move to another suitable slot with the same service duration. Sam calls and asks, Is there anything later that day? At this point the receptionist should search or collect the preference within its scope. It should not cancel 9 am, because Sam has not yet accepted a replacement.
The system shows a suitable 2 pm option. The receptionist states the relevant date and local time, explains the option according to the system's reservation behaviour and asks whether Sam wants the change. Sam says, Yes, but only if it is still the same technician. That condition becomes part of the final request. If the system cannot verify technician continuity, the receptionist should refer the conditional request rather than treating the yes as unconditional permission.
Suppose the approved implementation can check that condition and the caller confirms the move. The change operation then times out. A timeout does not establish whether the booking stayed at 9 am, moved to 2 pm or entered a partial state. The receptionist should use the approved verification path before retrying. If the state cannot be established during the call, it should explain that the change is not confirmed and create an assigned review request with the relevant references.
The reviewer checks the current booking and finds that the move completed at 2 pm, but the confirmation message failed. The recovery task is now communication, not another booking change. Sending the same change request again could create an unintended duplicate in some designs. The evidence should show the confirmed appointment state and the separate notification failure so staff can resolve the right problem.
Test the opposite outcome as well: the booking remains at 9 am and the 2 pm slot is no longer available. The receptionist must not claim that the earlier offer is still reserved. It can explain the current state and discuss alternatives or leave the request for staff, according to scope. The original appointment should be described accurately, and any decision to cancel it should require a fresh, explicit instruction.
A useful review worksheet asks: which appointment was selected; what did the caller authorise; what conditions did they attach; which policy permitted the action; what did the system confirm; what happened to the original; what notification arrived; what remains unresolved; who owns it? These fields make a complex failure understandable without assuming that every reschedule is simply an edit to one date field.
Before approving direct changes, ask a staff member to inspect a deliberately incomplete test outcome and explain the recovery without help from the implementer. They should identify which appointment currently exists, which instruction the caller gave and which action remains safe to take. If they cannot tell whether a retry would duplicate a booking, the recovery record is insufficient. Add the missing state or retain manual handling for that branch. Save the original and final appointment references together so a later reviewer can follow the change even when the caller remembers only the day and practitioner.