const ERROR_BACKOFF: Duration;
Per-error backoff floor. Real network failures should NOT hot-loop; 5s gives the CP a chance to recover (e.g. mid-rollout deploy).