How do you design timeouts and retries without causing outages?

Retries can amplify load during incidents. **Guidelines:** - Set sensible timeouts per dependency - Retry only safe operations (idempotent) - Use exponential backoff + jitter - Add circuit breakers and bulkheads - Prefer async processing for non-critical work **Interview tip:** mention “retry storms” and why jitter matters in distributed systems.