What security considerations apply to retries and timeouts in durable agent workflows?

Retries and timeouts can expose security risks if not configured carefully. For retries, ensure retry logic doesn't amplify denial-of-service attacks by retrying indefinitely on downstream failures. For timeouts, set reasonable limits to prevent resource exhaustion. Catalyst allows you to configure retry policies with backoff and max retries, and timeout values per activity. Always validate that retried calls are idempotent and authenticated.