When an normal operation is delayed in an action (such as a down message) it is possible that the recovery operation will action (such as a up message) if the trigger recovers before the normal operation is performed.

This can cause confusion for the recipients if they have not received a message stating the problem and only receive the recover message.

My suggestion would be to allow a toggle on the recovery operation to only be performed if any or specific normal operations have been performed.