The three statements are the part I would keep separate. A timeout is not a failed submission, and treating a click as proof the job is done is how a form gets sent twice. Stopping for a fresh observation instead of replaying the effect is slower, but it is the only version I would trust near a real order or payment.