Restarting your phone can no longer hand you a blank account
Closes the July 27 incident in which restarting the phone with an unsent watch note pending emptied the app. In the moments after a restart, before the phone has been unlocked for the first time, the app cannot read its own stored records — and it was treating that silence as proof that nothing had ever been there, concluding it was a brand-new install and creating a fresh empty account. The owner opened the app to no projects. The rule is now the opposite: when the device cannot yet be read, the honest answer is "I don't know who this is yet, ask again shortly" — never "nobody." A note arriving in that window is held on the watch and re-sent once identity is settled, instead of being filed under a guess and stranded. Verified against a purpose-built test that can force the exact condition on demand, so the safeguard no longer depends on reproducing a rare real-world accident.
Share This Ship
🔧 Shipped: Restarting your phone can no longer hand you a blank account 🧵
Closes the July 27 incident in which restarting the phone with an unsent watch note pending emptied the app.
In the moments after a restart, before the phone has been unlocked for the first time, the app cannot read its own stored records — and it was treating that silence as proof that nothing had ever been there, concluding it was a brand-new install and creating a fresh empty account.
The owner opened the app to no projects. The rule is now the opposite: when the device cannot yet be read, the honest answer is "I don't know who this is yet, ask again shortly" — never "nobody.
" A note arriving in that window is held on the watch and re-sent once identity is settled, instead of being filed under a guess and stranded.
Verified against a purpose-built test that can force the exact condition on demand, so the safeguard no longer depends on reproducing a rare real-world accident.
Follow the build → build-log-five.vercel.app #reliability #data-integrity #watch #buildinpublic