Makes code correct under failure — timeouts, retries, idempotency, isolation, and graceful degradation. Use when calling a network or external dependency, writing a job or webhook handler that can be retried, or handling anything that can fail partway.