Function pod_failure_intent 

pub fn pod_failure_intent(code: i32) -> &'static str

The podFailurePolicy intent a control plane compiles each exit code into (RFC 0016 §5.2). agentd emits the code; agentctl owns the actual FailJob/Ignore/Count choice and any operator override — this is the frozen hint it branches on, not a policy.

The five intents (RFC 0016 §5.2):

• complete — 0: not a failure; never retry.
• terminal — config/semantic error; a retry never helps ⇒ FailJob.
• retriable — usually transient ⇒ left to backoffLimit (Count).
• policy — default Count, but the operator’s --budget-exit-code remap (RFC 0011 §5.2) is honoured when present.
• infra — kernel-set kill (OOM / ungraceful SIGTERM); a resource/config fix (memory, grace period), never authored as a retry rule (§5.3).

An unrecognised code defaults to retriable — the conservative posture: an unknown failure is treated like a generic one and left to the backoff limit, never silently FailJob’d. (A code outside the contract should not occur at the frozen EXIT_CODES major; this is belt-and-suspenders for a future additive code an older agentctl has not learned.)