Error catalog

Overview

Treat retryability as an explicit property of the failed operation. Never blindly retry a consequential action.

• invalid_request: correct the request; do not retry unchanged.
• authentication/authorization: replace or re-scope credentials.
• no_eligible_route: relax only the constraint the workload owner approves.
• policy_denied: do not bypass; inspect the governing rule.
• evaluation_failed: review or use bounded escalation.
• provider_unavailable: retry only idempotent work within limits.

Production checklist

• Keep credentials in a server-side secret store.
• Set explicit cost, latency, privacy, provider, and regional constraints.
• Capture route and evaluation evidence for incident review.
• Test timeouts, cancellation, fallback, and denied-policy paths before rollout.