A realtime channel should carry a current logistics device event to authorized dashboard clients; it should not be treated as the system that remembers that event. The operational rule is blunt: commit durable device state to a database or log, publish a small notification that identifies the new state, and make every reconnect read from the durable source before resuming the live stream. Scope each connection token to the tenant, facility, and permitted topic, because a browser holding a token ...