Part 5: Why safe agent recovery is not “just retry,” and how idempotency guards, durable checkpoints, resume policies, and replay streams prevent one failed run from becoming a second real-world side