Model-invoked discipline for designing or reviewing failure behavior across remote dependencies, durable asynchronous work, and shared-capacity boundaries. Use when a change needs deadlines, cancellation, retries, idempotency, overload control, partial-failure recovery, or evidence requirements for these controls.
