A payment tool times out after the backend may have committed. Which integration property is required for safe retries?

1. Assume a timeout proves no write occurred
2. Unlimited immediate retries
3. Idempotency and operation-result reconciliation
4. A new random payment id on every retry