Fail-open design

Your agent always receives its messages. If any infrastructure dependency goes down during processing, the message is delivered anyway, with the failure noted in the envelope.

What happens on failure

• Single filter failure: that filter is skipped, the message proceeds. The envelope records the degradation.
• Multiple simultaneous failures: a circuit breaker trips and the message goes to quarantine as a safety measure.
• Quota exceeded: bypass mode — delivered directly, no filters, no lost messages.