The zero-second "completed" call is a great example of why status fields alone can't be trusted. A cheap complement to schema validation is an invariant check on the outcome itself: completed + duration under a few seconds + empty transcript should be its own alert class, regardless of what any provider reports. On the retry storm, putting the per-number cap in the dialer layer rather than in campaign config also helps, because campaign reprioritization can never override it.