# Error Handling / Resilience > Every term in this category is listed as one record, with its kind, its definition and its aliases, the principles whose relations name it, the principle or… Page: Ontology · Lexicon Canonical: https://banes-lab.com/ontology/lexicon#lexicon-category-error-handling-resilience Listed in [Ontology · Lexicon](https://banes-lab.com/api/pages/ontology/lexicon.md), after [Domain Concerns](https://banes-lab.com/ontology/lexicon/lexicon-category-domain-concerns.md) and before [Event Messaging Async](https://banes-lab.com/ontology/lexicon/lexicon-category-event-messaging-async.md). Every term in this category is listed as one record, with its kind, its definition and its aliases, the principles whose relations name it, the principle or contract that carries the same name where one exists, and the layer its category belongs to. A tag category also gives each term an example, which is the file the tag places or the rename from a refused word onto a covering tag. ### All-Or-Nothing Failure - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Failing the entire system when one part fails instead of degrading to reduced but working service. Referenced by [Graceful Degradation](https://banes-lab.com/records/architecture/graceful-degradation.md) How it is checked Checked by [Graceful Degradation](https://banes-lab.com/records/architecture/graceful-degradation.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Alternate Behavior - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that a defined alternate behavior exist to use when the primary path fails. Referenced by [Fallback Pattern](https://banes-lab.com/records/architecture/fallback-pattern.md) How it is checked Checked by [Fallback Pattern](https://banes-lab.com/records/architecture/fallback-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Availability of Degraded Dependency - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which tripping a breaker to protect the system also cuts off a still-partly-working dependency. Referenced by [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) How it is checked Checked by the tension resolution with circuit-breaker-pattern Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Backoff - Kind: [technique](https://banes-lab.com/records/kind/technique.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Progressively increasing the wait between retries to avoid overwhelming a recovering dependency. Referenced by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) How it is checked Checked by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Blast-Radius Reduction - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to contain a failure so it affects only one isolated partition. Referenced by [Bulkhead Pattern](https://banes-lab.com/records/architecture/bulkhead-pattern.md) How it is checked Checked by [Bulkhead Pattern](https://banes-lab.com/records/architecture/bulkhead-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Bounded Waiting - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to guarantee an operation waits no longer than a set limit. Referenced by [Timeout Pattern](https://banes-lab.com/records/architecture/timeout-pattern.md) How it is checked Checked by [Timeout Pattern](https://banes-lab.com/records/architecture/timeout-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Brittle Architecture - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition A fragile design that breaks entirely under any condition it was not explicitly built for. Referenced by [Resilience](https://banes-lab.com/records/architecture/resilience.md) How it is checked Checked by [Resilience](https://banes-lab.com/records/architecture/resilience.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Capacity Signaling - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that downstream capacity be signaled upstream so producers adjust their rate. Referenced by [Backpressure](https://banes-lab.com/records/architecture/backpressure.md) How it is checked Checked by [Backpressure](https://banes-lab.com/records/architecture/backpressure.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Cascading Failure Prevention - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to stop one component's failure from cascading through its callers. Referenced by [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) How it is checked Checked by [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Consistency / Feature Completeness - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which serving reduced functionality during failure sacrifices full consistency or completeness. Referenced by [Graceful Degradation](https://banes-lab.com/records/architecture/graceful-degradation.md) How it is checked Checked by the tension resolution with graceful-degradation Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Continued Operation Under Failure - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to keep operating correctly despite the failure of some components. Referenced by [Fault Tolerance](https://banes-lab.com/records/architecture/fault-tolerance.md) How it is checked Checked by [Fault Tolerance](https://banes-lab.com/records/architecture/fault-tolerance.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Controlled Failure - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to fail in a defined, handled way rather than crashing unpredictably. Referenced by [Error Handling](https://banes-lab.com/records/architecture/error-handling.md) How it is checked Checked by [Error Handling](https://banes-lab.com/records/architecture/error-handling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Deny-by-Default Behavior - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to default to denying access when a security check cannot complete. Referenced by [Fail Secure](https://banes-lab.com/records/architecture/fail-secure.md) How it is checked Checked by [Fail Secure](https://banes-lab.com/records/architecture/fail-secure.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Early Defect Detection - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to surface a defect immediately at its source rather than letting it propagate. Referenced by [Fail Fast](https://banes-lab.com/records/architecture/fail-fast.md) How it is checked Checked by [Fail Fast](https://banes-lab.com/records/architecture/fail-fast.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Error Model - Kind: [model](https://banes-lab.com/records/kind/model.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition A structured representation of the kinds of errors a system can raise and how they are categorized. Referenced by [Error Handling](https://banes-lab.com/records/architecture/error-handling.md) How it is checked Checked by [Error Handling](https://banes-lab.com/records/architecture/error-handling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Exception Swallowing - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Catching an exception and silently discarding it, hiding the failure from callers and logs. Referenced by [Error Handling](https://banes-lab.com/records/architecture/error-handling.md) Distinct from [Exception Control Flow](https://banes-lab.com/records/architecture/exception-control-flow.md): Exception swallowing discards a real failure, while exception control flow uses exceptions for cases that are not failures. How it is checked Checked by [Error Handling](https://banes-lab.com/records/architecture/error-handling.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Fail Open - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Granting access or continuing when a security check fails, exposing the system on error. Referenced by [Fail Secure](https://banes-lab.com/records/architecture/fail-secure.md) How it is checked Checked by [Fail Secure](https://banes-lab.com/records/architecture/fail-secure.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Failure Isolation - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that a failure be contained within a boundary so it cannot spread. Referenced by [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) How it is checked Checked by [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Failure Propagation - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Letting a failure spread unchecked across component boundaries instead of containing it. Referenced by [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) How it is checked Checked by [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Failure Threshold - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement of a defined failure count or rate at which a circuit breaker trips. Referenced by [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) How it is checked Checked by [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Feature Isolation - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that individual features be isolated so one can be disabled without taking down others. Referenced by [Graceful Degradation](https://banes-lab.com/records/architecture/graceful-degradation.md) How it is checked Checked by [Graceful Degradation](https://banes-lab.com/records/architecture/graceful-degradation.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Fragile Parsing - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Parsing input so rigidly that any minor deviation causes a failure. Referenced by [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) How it is checked Checked by [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Hidden Errors - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which catching failures at a boundary can obscure the underlying errors from view. Referenced by [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) How it is checked Checked by the tension resolution with error-boundaries Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Load Amplification - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which retrying failed operations multiplies load on an already-struggling dependency. Referenced by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) How it is checked Checked by the tension resolution with retry-pattern Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Localized Recovery - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to recover from a failure within its boundary without restarting the whole system. Referenced by [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) How it is checked Checked by [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Non-Idempotent Operation - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition An operation whose repetition changes the result, making it unsafe to retry. Referenced by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) How it is checked Checked by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Overload Protection - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to protect a system from being overwhelmed by shedding or slowing incoming load. Referenced by [Backpressure](https://banes-lab.com/records/architecture/backpressure.md) How it is checked Checked by [Backpressure](https://banes-lab.com/records/architecture/backpressure.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Resource Isolation - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that resources be partitioned so exhaustion in one pool cannot starve others. Referenced by [Bulkhead Pattern](https://banes-lab.com/records/architecture/bulkhead-pattern.md) How it is checked Checked by [Bulkhead Pattern](https://banes-lab.com/records/architecture/bulkhead-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Safe Failure - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to fail without corrupting state or causing further damage. Referenced by [Defensive Programming](https://banes-lab.com/records/architecture/defensive-programming.md) How it is checked Checked by [Defensive Programming](https://banes-lab.com/records/architecture/defensive-programming.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Shared Resource Pool - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Serving all work from one shared resource pool, so one overloaded consumer starves the rest. Referenced by [Bulkhead Pattern](https://banes-lab.com/records/architecture/bulkhead-pattern.md) How it is checked Checked by [Bulkhead Pattern](https://banes-lab.com/records/architecture/bulkhead-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Single Behavior Path - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Providing only one execution path with no fallback, so any failure in it fails the whole request. Referenced by [Fallback Pattern](https://banes-lab.com/records/architecture/fallback-pattern.md) How it is checked Checked by [Fallback Pattern](https://banes-lab.com/records/architecture/fallback-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Slow Operation Tolerance - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which enforcing timeouts sacrifices tolerance for legitimately slow operations. Referenced by [Timeout Pattern](https://banes-lab.com/records/architecture/timeout-pattern.md) How it is checked Checked by the tension resolution with timeout-pattern Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Stability - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which a system keeps operating steadily without collapsing under load. Referenced by [Backpressure](https://banes-lab.com/records/architecture/backpressure.md) How it is checked Checked by [Backpressure](https://banes-lab.com/records/architecture/backpressure.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Stability Under Stress - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to keep functioning under load spikes and adverse conditions. Referenced by [Resilience](https://banes-lab.com/records/architecture/resilience.md) How it is checked Checked by [Resilience](https://banes-lab.com/records/architecture/resilience.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Stale/Reduced Results - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which serving a fallback yields stale or reduced-quality results. Referenced by [Fallback Pattern](https://banes-lab.com/records/architecture/fallback-pattern.md) How it is checked Checked by the tension resolution with fallback-pattern Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Strict Output - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that a component emit only strictly conformant, well-formed output. Referenced by [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) Distinct from [Tolerant Input](https://banes-lab.com/records/lexicon/tolerant-input.md): Strict output governs what a component emits, while tolerant input governs what it accepts. How it is checked Checked by [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Strict Validation - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which rejecting deviant input conflicts with accepting it tolerantly. Referenced by [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) How it is checked Checked by the tension resolution with robustness-principle Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Timeout - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that an operation be given a maximum time to complete before being abandoned. Referenced by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) How it is checked Checked by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Tolerant Input - Kind: [constraint](https://banes-lab.com/records/kind/constraint.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The requirement that a component accept and cope with input that deviates from the ideal format. Referenced by [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) How it is checked Checked by [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Transient Failure Recovery - Kind: [capability](https://banes-lab.com/records/kind/capability.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The ability to recover from short-lived failures by retrying the operation. Referenced by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) How it is checked Checked by [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Trusting Invalid Inputs - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Assuming inputs are valid and using them without checking, so bad data flows through unguarded. Referenced by [Defensive Programming](https://banes-lab.com/records/architecture/defensive-programming.md) How it is checked Checked by [Defensive Programming](https://banes-lab.com/records/architecture/defensive-programming.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Unbounded Retry - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Retrying a failing operation endlessly with no limit, amplifying load and delaying recovery. Referenced by [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) Distinct from [Retry Storm](https://banes-lab.com/records/architecture/retry-storm.md): Unbounded retry is one caller retrying with no limit, while a retry storm is many callers whose combined retries prolong the failure, bounded or not. How it is checked Checked by [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Unsafe Default Continuation - Kind: [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition Continuing in an unsafe default state after a failure instead of stopping in a safe one. Referenced by [Fail Safe](https://banes-lab.com/records/architecture/fail-safe.md) How it is checked Checked by [Fail Safe](https://banes-lab.com/records/architecture/fail-safe.md) Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ### Verbosity - Kind: [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - Category: [Error Handling / Resilience](https://banes-lab.com/ontology/lexicon/lexicon-category-error-handling-resilience.md) - Layer: [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) Details Definition The degree to which pervasive defensive checks add verbosity and clutter to the code. Referenced by [Defensive Programming](https://banes-lab.com/records/architecture/defensive-programming.md) How it is checked Checked by the tension resolution with defensive-programming Population The term's definition and every architecture edge that names the term Freshness A verdict stands until the definition, the term's kind or an edge that names it changes Refusal The resolution gate fails an edge that resolves to no term, and a definition that opens as another kind Observation The resolution validator's pass over every edge target and every definition opening Evidence Watched to fire and to accept: a suite plants a term no edge names, a dangling dependency and a second check home, and the bundled terms pass Authoritative side The term record, which every edge that names the term cites Depends on Not answered Shape it refuses Not answered ## Links to - [anti-pattern](https://banes-lab.com/records/kind/anti-pattern.md) - [Correctness Core](https://banes-lab.com/records/layer/correctness-core.md) - [Graceful Degradation](https://banes-lab.com/records/architecture/graceful-degradation.md) - [constraint](https://banes-lab.com/records/kind/constraint.md) - [Fallback Pattern](https://banes-lab.com/records/architecture/fallback-pattern.md) - [quality-attribute](https://banes-lab.com/records/kind/quality-attribute.md) - [Circuit Breaker Pattern](https://banes-lab.com/records/architecture/circuit-breaker-pattern.md) - [technique](https://banes-lab.com/records/kind/technique.md) - [Retry Pattern](https://banes-lab.com/records/architecture/retry-pattern.md) - [capability](https://banes-lab.com/records/kind/capability.md) - [Bulkhead Pattern](https://banes-lab.com/records/architecture/bulkhead-pattern.md) - [Timeout Pattern](https://banes-lab.com/records/architecture/timeout-pattern.md) - [Resilience](https://banes-lab.com/records/architecture/resilience.md) - [Backpressure](https://banes-lab.com/records/architecture/backpressure.md) - [Fault Tolerance](https://banes-lab.com/records/architecture/fault-tolerance.md) - [Error Handling](https://banes-lab.com/records/architecture/error-handling.md) - [Fail Secure](https://banes-lab.com/records/architecture/fail-secure.md) - [Fail Fast](https://banes-lab.com/records/architecture/fail-fast.md) - [model](https://banes-lab.com/records/kind/model.md) - [Exception Control Flow](https://banes-lab.com/records/architecture/exception-control-flow.md) - [Error Boundaries](https://banes-lab.com/records/architecture/error-boundaries.md) - [Robustness Principle](https://banes-lab.com/records/architecture/robustness-principle.md) - [Defensive Programming](https://banes-lab.com/records/architecture/defensive-programming.md) - [Tolerant Input](https://banes-lab.com/records/lexicon/tolerant-input.md) - [Retry Storm](https://banes-lab.com/records/architecture/retry-storm.md) - [Fail Safe](https://banes-lab.com/records/architecture/fail-safe.md)