Backoff ladder

A capped restart schedule: five attempts at one, two, five, five and five seconds, then stop and say so.

The attempt counter resets after five minutes of health, so a process that misbehaves once a week never accumulates its way to the cap.

It is capped rather than exponential forever because the two cases need different answers. A transient hiccup deserves a quick retry; a genuinely broken child deserves to fail loudly instead of being restarted quietly until someone notices the app has been useless all afternoon.