An external API times out during a form submission. What should the application design account for?

1. Tell the user the operation succeeded regardless of the result
2. Always repeat the request indefinitely without tracking outcomes
3. Publish the API credential in the error message
4. Clear failure handling and safe retry behavior that avoids duplicate business operations