PRINCIPLE
Design for failure
Retries, idempotency, fault isolation, explicit failure states and recovery paths belong in the design, not in incident patches.
I assume dependencies will become slow, unavailable or ambiguous. Critical workflows should make uncertainty explicit, preserve enough evidence to recover safely, and distinguish retryable failures from terminal business outcomes.