Spends a recovery proof and returns a NEW owner token; the previous one stops working (inner
route; the front worker applies the failure budget around it).
Every refusal names a reason the client branches on. Only unknown is retryable, because a
record written seconds ago may not have reached this colo yet.
Spends a recovery proof and returns a NEW owner token; the previous one stops working (inner route; the front worker applies the failure budget around it).
Every refusal names a
reasonthe client branches on. Onlyunknownis retryable, because a record written seconds ago may not have reached this colo yet.