Assume the network will fail mid-write
Every create and update should land in a local queue with idempotency keys before the UI claims success. Sync is a background job, not a hope.
Define conflict policy in plain language
Last-write-wins is rarely enough for sales orders. Decide whether server, device, or human review wins—and show that status in the UI.
Sync telemetry is a product feature
Admins need to see pending queues, failed payloads, and device health. Invisible sync debt becomes revenue leakage.