You're deployed at a customer whose order pipeline calls a third-party fulfillment API that intermittently times out or returns 429/500. Today, transient failures silently drop orders, and the occasional retry creates duplicates. The integration is below. AI tools are allowed. Make it resilient: retry transient failures with backoff and make retries safe so orders aren't duplicated, while surfacing genuine failures. Then manage expectations with a frustrated client contact.