{
  "title": "ToolResilienceProfile",
  "description": "Per-tool timeout, retry, circuit breaker, probe and fallback settings for PB-AGT-09-02. Values are team defaults to tune per tool. The breaker defaults (5 failures, 60-second cool-off) match PB-AGT-02-05. probe_url is a read-only endpoint used once in Step 7; replace each placeholder for your deployment.",
  "idempotency_key_format": "${THREAD_ID}:${STEP_NUMBER}",
  "force_open_flag_format": "tool_<tool name>_force_open",
  "tools": {
    "erp_order_lookup": {
      "timeout_seconds": 10,
      "max_retries": 3,
      "is_idempotent": true,
      "honour_retry_after": true,
      "circuit_breaker": {
        "failure_threshold": 5,
        "cool_off_seconds": 60
      },
      "probe_url": "${ERP_LOOKUP_PROBE_URL}",
      "fallback": "cache_lookup"
    },
    "erp_order_create": {
      "timeout_seconds": 15,
      "max_retries": 0,
      "is_idempotent": false,
      "requires_idempotency_key": true,
      "honour_retry_after": true,
      "circuit_breaker": {
        "failure_threshold": 3,
        "cool_off_seconds": 120
      },
      "probe_url": "${ERP_ORDERS_HEALTH_URL}",
      "fallback": "park_run"
    },
    "model_chat": {
      "timeout_seconds": 30,
      "max_retries": 2,
      "is_idempotent": true,
      "honour_retry_after": true,
      "circuit_breaker": {
        "failure_threshold": 5,
        "cool_off_seconds": 30
      },
      "probe_url": "${MODEL_PROBE_URL}",
      "fallback": "park_run"
    }
  }
}