A distributed workflow needs a localized repair without weakening observability or rollback safety. The affected area is checkout journey.
Repair the checkout journey dependency protection implementation so it opens only after the failure threshold and calculates a deterministic retry time.
Evidence
- Affected surface: Balanced full-stack / checkout journey.
- Observed failure family: calculate circuit-breaker state.
- Scope policy: region must equal eu-west.