Design the error boundary: domain exceptions mapped to transport codes,

typed result where exceptions are inappropriate, retry policy (max attempts, backoff+jitter, which status codes are retryable), circuit breaker, and user-facing messages that are actionable without exposing internals.