Platform

An operating system for AI agents.

Work, code, CI, QA, production and customers as native capabilities, sharing one context and one set of rules.

Clamp retry backoff and honour Retry-After0 / 3 viewed0

Review changes

Needs review

Clamp retry backoff and honour Retry-After

#418

OpenPRPriya Raman wants to merge priya/retry-after into main3 files+37−3Updated 6 min ago

Stack2 of 3Copy stack

PR#419Show the retry budget on the checkout dashboardDraft14 min ago
PR#418Clamp retry backoff and honour Retry-AfterNeeds review6 min ago
PR#417Add a retry budget to the payment clientMerged1 day ago
mainTrunk

DescriptionEdit

Caps the exponential backoff at Policy.Max and waits out a 429’s Retry-After instead of retrying into it.

Activity

Priya Raman pushed e41b9d2 Honour Retry-After on 4291 hr ago
Priya Raman pushed a1f4c2e Cap backoff at Policy.Max6 min ago

WritePreview

Leave a comment

Comment

services/checkout/client.go+2−1goViewed

57 lines@@ func (c *Client) Do(req *http.Request) (*http.Response, error) {

++58 resp, err := c.http.Do(req)58 resp, err := c.http.Do(req)

++59 if err != nil {59 if err != nil {

++60 return nil, err60 return nil, err

++61 }61 }

++62 if resp.StatusCode >= 500 {62 if retryable(resp.StatusCode) {

+63 c.after = retryAfter(resp.Header)

++63 return resp, errRetry64 return resp, errRetry

++64 }65 }

to end of file

services/checkout/retry.go+12−2goViewed

40 lines@@ func (p *Policy) delay(n int) time.Duration {

++41func (p *Policy) delay(n int) time.Duration {41func (p *Policy) delay(n int) time.Duration {

++42 d := p.Base << n42 d := p.Base << n

++43 if d > p.Max {43 if d <= 0 || d > p.Max {

++44 d = p.Max44 d = p.Max

++45 }45 }

++46 return d + jitter(d)46 return d + jitter(d/2)

++47}47}

+48

+49// retryAfter reads a 429's Retry-After.

+50func retryAfter(h http.Header) time.Duration {

+51 v := h.Get("Retry-After")

+52 secs, err := strconv.Atoi(v)

+53 if err != nil || secs < 0 {

+54 return 0

+55 }

+56 return time.Duration(secs) * time.Second

+57}

to end of file

services/checkout/retry_test.go+23−0goViewed

+1package checkout

+3import (

+4 "net/http"

+5 "testing"

+6 "time"

+7)

+9func TestDelayStaysInsideMax(t *testing.T) {

+10 p := Policy{Base: time.Second, Max: 30 * time.Second}

+11 for n := 0; n < 64; n++ {

+12 if d := p.delay(n); d <= 0 || d > p.Max+p.Max/2 {

+13 t.Fatalf("delay(%d) = %v, outside (0, %v]", n, d, p.Max)

+14 }

+15 }

+16}

+17

+18func TestRetryAfterSeconds(t *testing.T) {

+19 h := http.Header{"Retry-After": []string{"7"}}

+20 if got := retryAfter(h); got != 7*time.Second {

+21 t.Fatalf("retryAfter = %v, want 7s", got)

+22 }

+23}

Checkout 5xx alertBoltleadMMayaIdle

An Observe alert woke Bolt: checkout 5xx above 1%

Boltagent14:06

5xx on checkout jumped at 14:02. Every charge that stripe-gateway answers with a 503 is retried three times, with no backoff.

checkout 5xx rate, %

now 4.0%before the deploy 0.2%alert at 1%

The coding agent on feat/retry-budget is clamping the backoff and honouring Retry-After.

Clamp retry backoff and honour Retry-After #418Openfeat/retry-budget → mainbuildtestimageChecks passed

Maya allowed Bolt to use Bash.

Boltagent14:13

Staging’s gateway answers in 140 ms with the fix. It’s ready for you to merge.

Ready to merge3 of 4 done

Cause: retries with no backoff
Fix written, checks passed in #418
Staging gateway healthy
Merge #418

Merge #418Watch 5xx after the merge

Message the thread — Bolt leads; @ to ask someone directly…

Checkout 5xx alertBoltleadMMayaIdle

An Observe alert woke Bolt: checkout 5xx above 1%

Boltagent14:06

5xx on checkout jumped at 14:02. Every charge that stripe-gateway answers with a 503 is retried three times, with no backoff.

checkout 5xx rate, %

now 4.0%before the deploy 0.2%alert at 1%

The coding agent on feat/retry-budget is clamping the backoff and honouring Retry-After.

Clamp retry backoff and honour Retry-After #418Openfeat/retry-budget → mainbuildtestimageChecks passed

Maya allowed Bolt to use Bash.

Boltagent14:13

Staging’s gateway answers in 140 ms with the fix. It’s ready for you to merge.

Ready to merge3 of 4 done

Cause: retries with no backoff
Fix written, checks passed in #418
Staging gateway healthy
Merge #418

Merge #418Watch 5xx after the merge

Message the thread — Bolt leads; @ to ask someone directly…

Start anywhere

Buy one product. Grow into the OS.

Each product works on its own. Each one you add gives your agents more to act on.

The loop

Every release teaches the next one.

ResearchModels that learn from the loop itself

01BuildYour team and coding agents
02TestQA agents on web and mobile
03ShipCI builds what changed
04ObserveErrors, traces, infrastructure
05UnderstandWhat customers actually did
06LearnYour team decides what to change
07ImproveAgents make it, people approve it

In the product today
People decide, agents assist
Research

See it work

One turn of the loop.

Checkout errors climb. The trace shows the payment gateway failing and being retried.

Any serviceLast 1 hour

Duration · last hour · 797 traces

TimeStatusOperationDurationSpansServicesErrors

14:02:11.482OKcheckoutGET /cart38 ms62—

14:02:10.907ErrorcheckoutPOST /charge412 ms1443

14:02:10.311OKinventoryGET /stock/:sku21 ms31—

14:02:09.854OKcheckoutGET /orders/:id64 ms83—

14:02:09.120OKpaymentsPOST /refund133 ms93—

14:02:08.733OKcheckoutPOST /charge188 ms114—

14:02:08.045OKledgerPOST /append47 ms51—

14:02:07.598OKcheckoutGET /cart41 ms62—

14:02:06.990OKcheckoutPOST /charge205 ms114—

14:02:06.211OKinventoryPOST /reserve29 ms41—

14:02:05.876OKcheckoutGET /health2 ms11—

Native capabilities

Everything agents act on.

Agents

Build

Run

ObserveLogs, traces, metrics, alerts.
InfrastructureCloud resources beside the code.
UnderstandProduct analytics and replay.
Flags and experimentsRoll out, measure, decide.

Customers and work

PlanningTasks, cycles and initiatives.
CustomersPeople and accounts in one record.
FeedbackRequests, votes and a public portal.
DocumentsSecure sharing with analytics.
Chat and SlackThreads with people and agents.

Agents, and your own Claude Code, reach all of it through one MCP endpoint, with exactly the permissions of the person they act for.

Put AI to work.

Hire an agent Talk to us