What do you do when a tool call times out after a write?

I’m building MELRA, a local runtime for MCP and CLI tools, and I’m testing this recovery edge case: a write may reach the provider even though the agent never gets a response. Retrying can duplicate it, but waiting without a way to reconcile is frustrating. In the current alpha, MELRA parks that attempt until state can be checked. What evidence would you trust before allowing a retry, especially when provider lookups are slow?