Unless I missed something, step 4.1 in the add an allowed Bluetooth device algorithm handles the case where no device is found in allowedDevices but:

• does not initialize allowedDevice, whereas the starting point is "If one [allowedDevice] is not found"
• does not add the allowedDevice to the storage, which it probably should?