Pending

Rows stay on this device until the server confirms each batch, so an interrupted sync loses nothing — send again and only what is left goes. Re-signing a step replaces its record rather than adding a second one.