Some Auto rescue retry attempts have been successful in production, however we still need to capture them in. Currently we are unable to capture them due to the capture-from-ipn-listener flag being set to false in production, thereby blocking the code path from reaching the capture step here: Link to code line.
We must have missed it in sandbox because the dev config has the flag set to true by default.