Transient Storage Errors: Governing Failing Thumbnail Upload Retries Across Tenants
Short answer: a thumbnail retry should be governed as a private, tenant-scoped write, with bounded exponential backoff, a deterministic object key, and enough telemetry to distinguish provider trouble from an application storm. Delivery should then use a short-lived signed URL.