Daily Digest
Don't blind-retry sends or charges
Check before retrying so a timeout doesn't send or charge twice.
The technique
Blind retries treat every failure like a safe read. Sends, charges, and comments can commit even when the client times out. Classify the op: reads may retry; side-effecting ops retry only when a reconcile check proves not_committed, and fail closed when the commit state is unknown.
How it was tested
Offline structural sim (no live model): 10 retry cases. Gate matched all 10; blocked 4 blind-retry slips (unknown or already-committed side effects) while still allowing reconciled not_committed retries and all reads.