Local vs Global Balance
Green Goods keeps capture and recovery close to the user while treating shared protocol records as the durable coordination layer.
Boundary
- Drafts, media preparation, retry state, and install-specific caches are local-first.
- Attestations, Garden roles, approvals, and contract state are global and chain-scoped.
- The job queue bridges the two: it preserves recoverable work locally, then records it through the authoritative protocol path when connectivity and authorization are available.
- Derived UI state may explain syncing or failure, but it must not masquerade as confirmed protocol state.
When changing this boundary, start at the shared job-queue and service-worker modules. Prove offline recovery and duplicate prevention before updating interface copy.