A circuit breaker watches calls to a service or tool. After enough failures, it opens and rejects new calls for a cooling period, preventing an agent workflow from repeatedly stressing a dependency that is already unhealthy.
The control later permits a limited probe to test recovery before normal traffic resumes. Circuit breakers work with timeouts, retry limits and fallback behavior, and their state should be visible so operators can distinguish protected failure from unexplained inactivity.
