Here's the challenge:

• The RP keeps track of enrollments, and is aware of one enrollment for an instrument.
• But if, for a given transaction, suppose the user chooses to cancel.
• If that is indistinguishable from "no matching credentials" then the RP does not know whether to offer to enroll the user on this device (which might be a different authenticator than the one it already knows about).