circuit breaker

Tools fail: timeouts, rate limits, bad arguments, garbage output. A naive agent retries blindly or quits. The signal is classifying errors and matching each to the right recovery, with hard caps.

A provider outage should cost you quality, not the feature. The answer that scores is a pre-decided fallback ladder, a timeout policy that treats slow as down, and the discipline to test the path you hope never runs.

Manual rollback means minutes of damage while someone wakes up. What matters is defining the trigger signals, thresholds, and guardrails that revert automatically, without flapping on noise. Here is how to make the loop safe.