A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is API transaction.
Repair the API transaction dependency calls implementation so it retries transient failures with bounded exponential delays and stops permanent failures.
Evidence
- Affected surface: Full-stack backend focus / API transaction.
- Observed failure family: plan bounded retries.
- Scope policy: tenantId must equal tenant-primary.