runOneStep re-executes the backend at most once when the first attempt is a settled failure or missing target after provider errors, records each attempt honestly, and fail-closes after the bound. Co-authored-by: Cursor <cursoragent@cursor.com>