

Evaluating two call routing workflows for a peer-to-peer system (Diagrams attached)
Hi everyone,
I am mapping out a communication system that connects User A (caller) with User B (receiver) through a central system.
System requirements:
- The system must connect User A directly to User B via phone.
- User B negotiates the transaction details directly with User A on the call.
- No escrow or upfront billing is handled during the initial connection.
The problem:
I need to audit this logic for vulnerabilities. Specifically, how to prevent off-system transactions where users take the conversation offline to bypass system tracking.
I have attached two routing options I designed.
Questions:
- Which workflow design is more resilient against off-system bypass?
- What technical triggers (e.g., call tracking, masking) should be included to flag suspicious routing behavior?
Looking for feedback purely on the architecture and system logic. Thank you!