A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is account settings.
Repair the account settings dependency calls implementation so it retries transient failures with bounded exponential delays and stops permanent failures.
Evidence
- Affected surface: Balanced full-stack / account settings.
- Observed failure family: plan bounded retries.
- Scope policy: tenantId must equal tenant-primary.