There is some trust involved that we mitigate with Nostr events but it sounds like you don’t know how hold invoices work.

Read more on how it all works here: https://github.com/supertestnet/zaplocker?tab=readme-ov-file#four-problems-zaplocker-solves