Retries need a stopping rule

Retries can help with transient failures, but synchronized retries can add load when a service is already struggling. Use a retry limit with backoff and jitter, and retry a write only when it is safe to repeat or protected by an idempotency key.