Return only valid times after applying hours, buffers, and lead time—plus clear rejection reasons for debugging and tuning.
Prevent conflicts while the user chooses a slot, then confirm with idempotent requests that are safe under retries and timeouts.
Trigger downstream workflows on confirm/cancel (CRM updates, reminders, follow-ups) without building custom schedulers.