Every organization has commitments sitting in a state that doesn't officially exist.
A support ticket marked "awaiting info" for three weeks, with no escalation path and no stated consequence if the information never shows up. A procurement approval that stalls because nobody has standing to refuse it and nobody wants to sign it. An insurance claim where the adjuster is waiting on documentation from a third party who hasn't responded and may never respond.
Twenty-some years in operations, and the most common failure I run into is a system built with two boxes, done and not done, when the work actually has three states. The third one is: we don't know yet, and pretending we do will cost us later.
Organizations need a designed disposition for that third state. Call it a hold. Four properties:
- Consequences are frozen where freezing is possible.
- The uncertainty is explicitly recorded.
- Someone is named as responsible for resolving it.
- The state has a defined expiration, a date after which something happens whether or not the uncertainty has been resolved.
None of this is new. The reopening structures in "The Right to Reopen" already contain versions of it. When California's Department of Insurance tells policyholders that an initial payment is an advance rather than a final settlement, that's the shape of a hold: partial action taken, matter still open, new evidence can change the outcome. Federal Longshore claims can be modified within a year of the last payment, and modification doesn't disturb compensation already paid.
The informal version works as long as volume is low enough that somebody remembers to follow up. A human case manager carries a mental inventory of the dozen claims that are stuck, checks in, nudges the third party, escalates when the delay gets unreasonable. That's a person compensating for the absence of a process. I've been that person, and I've watched a lot of other people be that person. It works until volume spikes, which is exactly when you need it most.
At agent volume, the informal version falls apart. If a system commits to a thousand service agreements in an afternoon and forty of them carry ambiguous terms that might or might not trigger a specific obligation, those forty need somewhere to go. Absent a formal hold they default to accepted, because there's no other box, and the ambiguity resurfaces later as a dispute or a complaint or a write-off.
I argued in "What Rollback Doesn't Return" that technical reversibility and practical recoverability come apart the moment another party has acted on the commitment. The hold is the state you want before that happens.
The design work is all in the expiration. A hold without one is a queue that grows forever, and I have watched enough of those to know precisely how it ends. A hold with an expiration forces the question: if nobody resolves this by the date, what then? Does it default to accepted? Rejected? Does it land on a human with authority to decide? That default is a policy choice. Informally, it's whatever happens to happen, usually accepted, usually unnoticed. Written down, it's something you can argue about before it bites you rather than after.
The costliest disputes aren't the ones where someone is wrong. They're the ones where both sides are right, because the system told them different things.

