Every uncovered position becomes one recovery case with an owner, a deadline and a priority that reflects the risk. Offers widen on a timer, swaps are checked leg by leg, and the change is committed all at once.
Cancellations, sickness, unallocated shifts and missed check-ins open recovery cases automatically. Priority reflects time-critical medicines, time to start, continuity, ratio and how many eligible people are left.
Offer to a named worker, then the person's team, then everyone eligible, then on-call. A claim is held and re-checked before it is approved, and a second claimant is told clearly that someone got there first.
When nobody is free, build a swap. Each leg is checked, every vacated duty must be refilled inside the plan, and the whole chain is committed together — or not at all.
Workers confirm the version of the change they are working to.
A commit happens once, against the allocation versions it was checked on.
An offer that repeats the confidential reason for the gap is refused.
From a sickness call to a confirmed, acknowledged cover.
