16.64“What if Salesforce is degraded?”

“I'd monitor the error and latency rate, use bounded retries only where safe, and prevent retry storms. For workloads that don't require synchronous completion I'd prefer queueing and controlled recovery. If the outage is prolonged, I'd monitor backlog age and DLQ/retry state rather than holding user HTTP requests open.”

Excellent.