The timeout text tells the agent not to retry, and users read that as a session-wide lock with no way back (#114204). Document the supported path: a new user message raises a fresh tool call and a fresh approval card; timeouts do not count toward the denial breaker. Fixes #114204