A timeout doesn't stop the work

A client timing out only means it stopped waiting; the server-side operation may still be running. Propagate cancellation where possible, and check which layer owns the deadline. Stop downstream work when cancellation is safe.