Which retry-with-backoff strategy is safe for a non-idempotent POST while avoiding thundering-herd load.
Your app POSTs a payment request. On a 503 or timeout you want to retry safely without double-charging the user or overwhelming a recovering server. Which approach is correct?