Observability — single pane
One pane for the whole stack: per-flagship uptime/latency (see /status), Khipu DAG depth, Yuyay-13 axis distribution, HUKLLA tripwire firings, and circuit-breaker states. Every external call is wrapped in a Hystrix-style breaker with a named fallback.
Circuit breakers (Hystrix semantics)
| Breaker | Wraps | State | Fallback |
|---|---|---|---|
| llm_router | HF Router / LLM providers | CLOSED | tier-downgrade → cached → honest 503 |
| hf_hub | Hugging Face Hub | CLOSED | local snapshot |
| github | GitHub API | CLOSED | cached read |
| ground_link | satellite / ground-link | CLOSED | pre-signed ROE envelope (disconnected edge) |
CLOSED→OPEN when failures ≥ threshold in a rolling window; OPEN short-circuits to the fallback and emits a
breaker_open Khipu degradation receipt; HALF-OPEN probes with one trial call. Breakers never alter the 13-axis gate math (additive).Khipu DAG & Yuyay
| Signal | Source | Posture |
|---|---|---|
| Khipu DAG depth | Merkle DAG, SHA-256-linked | live substrate · off-box store AMBER |
| Yuyay-13 distribution | 13-axis yuyay_v3 conjunctive AND | LOCKED |
| HUKLLA firings | T01–T10 tripwires | live |
Source: resilience_observability/CIRCUIT_BREAKER_LAYER.md · DEGRADATION_PATHS.md