A circuit breaker needs a recovery path

A common circuit-breaker design stops repeated calls to a failing dependency. In the open state, reject or defer calls; after a cooldown, allow a small number of probes in half-open state. Close again when probes succeed, or reopen after failure. Pair this with timeouts; a fallback only helps when it preserves the operation's meaning.