The timeout nobody planned for
A call to another system times out. Did the invoice post or not? Retry it like an ordinary failure and you can post it twice. We record each instruction before it is sent and treat an uncertain result as its own state, with a defined recovery path.
How we handle uncertain results