Read both HTTP status and the error body
Errors may use{ "statusCode": 403, "message": "SCOPE_REQUIRED" } or a validation body with a code and explanatory message. Preserve the operation ID and your idempotency key in your logs; never log credentials or card details.
Transport errors
After a timeout or connection failure onPOST /operations, retry the exact request using the original idempotency key. Do not create a new order identifier to escape an error.
Use bounded exponential backoff with jitter for transient read errors. Stop on a persistent 4xx error and correct the cause. An operation in manual_review retains an unresolved outcome and may retain its reserve; contact support with the operation ID.