A flood-warning device must continue to trigger a local alert even if its connection to a distant data center is temporarily lost. Which design choice best supports this requirement?