A project invoke may fail transiently, and the team plans retries. Which design is most defensible?

1. Assume retry configuration replaces fault monitoring.
2. Use supported retry configuration with bounded attempts and an idempotent target operation.
3. Retry non-idempotent payments without any transaction key or duplicate checks.
4. Retry every authorization and invalid-data error indefinitely.