Repository as an Operating System

Retries Are a Smell

Retries can improve outputs, but they also hide risk when they substitute for governance. In Protocolware, retries are not banned; they are governed by Gates and recorded as Proof.

The problem

  • “Try again” is often used when rules are unclear or missing.
  • Retrying masks why a step failed and who allowed it to proceed.
  • Repeated attempts drift into unapproved behavior.
  • Teams accept success without understanding admissibility.
  • Systems become dependent on persistence rather than correctness.
  • Failure signals are suppressed instead of investigated.

The shift

  • Not “retry until it works,” but “gate the retry and prove why.”

How it works

Protocolware treats every retry as a new Reduction.

Canon still defines what is allowed.
Reality defines the current state.
PATH defines the permitted transitions.

A Gate decides whether a retry is admissible.
“Stop is valid” remains explicit: a Gate may refuse a retry, and that refusal is a correct outcome.

Because artifacts are truth, each retry becomes an Artifact with a recorded decision. Proof captures why the retry was admitted or rejected. This prevents failure from being hidden behind persistence.

Retries are sometimes necessary. The difference is governance: a retry is not improvisation, it is a permitted transition with explicit boundaries. If a retry is not permitted, the correct response is to stop and record a Question.

The smell is not the existence of retries, but the absence of governance around them. Unbounded retries indicate that Canon, PATH, or Gate definitions are missing, ambiguous, or incomplete.

If a retry is required, the system must state why. That reason belongs in an Artifact and must be reviewed like any other decision. Otherwise, retries quietly become policy changes.

The mechanism is intentionally strict. It trades spontaneity for clarity so the system can be reviewed, improved, and trusted over time. Every change remains accountable to explicit artifacts and Gates rather than memory or preference, which keeps governance stable as teams and vendors change.

Why it matters

  • Prevents silent drift by forcing retries through the same Gates as first attempts.
  • Makes auditability real by recording every retry as Proof.
  • Reduces operational risk by stopping when rules are unclear.
  • Keeps AI work production-grade by avoiding uncontrolled loops.
  • Creates a clear decision trail when outcomes are challenged.
  • Surfaces gaps in Canon and PATH that require explicit fixes.
  • Encourages teams to fix the rule, not just the output.

Next