Circuit breakers

Rows are upstream systems. Columns are tenants. A non-closed breaker pauses the tenant’s workflows until the upstream is healthy and an operator signals resume.