Safe recovery

Prefer retryable operations. Change servers, credentials, proxies, or domains only when status indicates manual repair is required.

Retry policy

Temporary network, pull, and execution failures can often be retried. Input, credential, DNS, and certificate material issues need repair first.