A downstream API returns retryable throttling responses. Which retry policy is most appropriate?

1. Immediate parallel retries with no upper limit.
2. Bounded exponential backoff with jitter, honoring retry guidance and operation idempotency.
3. Treat every response as success to avoid waiting.
4. Retry authorization failures forever using the same invalid credentials.