Design overload protection that accepts, queues, degrades, rejects, or sheds work according to capacity, deadlines, priority, and user value.