Use bounded retries only for transient failures and preserve
session_id and client_message_id for correlation. Never log bearer keys, identity context, attachment grants, signed preview URLs, or raw private tool responses. Inspect the matching Builder conversation and trace evidence using synthetic test data.