The problem
Model connected, degraded, disconnected and pairing-required states explicitly.
Design the boundary
Pause new sends, alert an authorized operator and expose a short-lived QR pairing flow scoped to the workspace.
Process the interaction
Resume queued messages only after the provider confirms a healthy session; preserve idempotency keys.
Measure the outcome
Measure disconnect frequency, time to re-pair and messages held during recovery.