Outage memory. Without it, a dead PSP gets retried first on EVERY checkout —
each customer pays the failed attempt's latency for the whole outage. The
breaker skips a PSP after failureThreshold consecutive transient failures,
lets one probe through after cooldownMs (half-open), and closes again on
any response that proves the PSP alive (success OR business rejection).
Outage memory. Without it, a dead PSP gets retried first on EVERY checkout — each customer pays the failed attempt's latency for the whole outage. The breaker skips a PSP after
failureThresholdconsecutive transient failures, lets one probe through aftercooldownMs(half-open), and closes again on any response that proves the PSP alive (success OR business rejection).