A support team is triaging an incident after credential rotation; screenshots are allowed but customer identifiers cannot be logged. A reviewer challenges the current design around retry-attempt logging for queue transactions because the happy path passed but failure evidence is weak. Which option is the best design choice?
