Breakers

Circuit breakers the control plane trips from what it hears across every run, per sink tool and per peer: too many calls across the estate in the window, or failures in a row, and the breaker opens for its cooldown. While it is open every worker is served it and every run is refused the call; then it lets one call through. A person may close one by hand once the downstream is mended.