Retry policies: Specification
Service-to-service calls propagate remaining deadline budget, refuse work that cannot finish inside it, and distinguish client cancellation from deadline expiry in status, retries, and traces.
Places a breaker per downstream dependency with an explicit fallback, a bounded half-open probe budget, and no shared breaker that hides a tenant-specific outage.