Recover safely when the carrier completed part of the workflow and your system did not.
Partial success means the workflow is now distributed. A carrier may create the label while your persistence layer fails, or may accept some parcels in a bulk request and reject others. The fix is not 'retry everything.' The fix is item-level state, one logical operation key, and explicit compensation rules.
Compensation can mean voiding the external artifact, replaying the internal save against the original operation ID, or parking the workflow for manual review. Choose one based on reversibility, billing exposure, and auditability.