§ ResilienceDocument · REG-RES-2026.06

The hard part isn’t the happy path. It’s everything that goes wrong.

Stalls, failures, runaway loops, no-shows. Regisseur watches for them, proposes a way through, and escalates — and a person always authorizes the recovery. Self-healing operations, not autonomous ones.

A case flagged at risk — a failed application-intake step in the needs-attention panel with View output and Take over as underwriter actions, plus open escalations.
Failure, surfaced for a humanA failed step flagged for take-over, with escalations and projected close
§ 01Coordinator

The coordinator watches for stalls.

A platform-level coordinator monitors case progress and surfaces work that's stuck — and manages the cross-party inquiries (chasing the outside party a case is waiting on) so a case doesn't quietly park forever.

The operations dashboard — active jobs, stuck nodes with elapsed times, open escalations, workspace halt status, and recent failed tasks with real error messages.
The coordinatorStuck nodes with elapsed times, open escalations, and recent failed tasks
§ 02Recovery

Recovery paths, human-approved.

When a step fails, the recovery engine identifies the blocked downstream work, finds candidate routes around the failure (bypass or parallel unblocked paths), and scores each by timeline impact — days delayed, SLAs at risk.

It proposes; the process manager chooses. Recovery is never silent.

§ 03Brakes

Circuit breaker and emergency brake.

Two safety levels. The workspace-wide emergency brake halts every agent, queue, and outbound message. Below it, a per-job circuit breaker trips a single runaway case — guarding against execute/cascade loops and runaway cost — without stopping the workspace.

The emergency brake in Safety settings — a workspace-wide halt control, here showing status Running.
The emergency brakeA workspace-wide halt, here showing Running
§ 04SLA

Time budgets, escalation, and alerts.

Every step carries an SLA clock. Escalation policies define who gets notified, on which channel, and when a budget is at risk. SLA projection flags at-risk cases before they breach.

An escalation policy — a two-tier standard escalation with in-app reminders and email notifications as a budget runs down, plus precedence rules.
An escalation policyTiered reminders and notifications as a budget runs down
§ Next step

See a stalled case recover — under human authority.

Bring a process that stalls in real life. We'll show the coordinator surfacing it, the recovery engine proposing scored routes around the failure, and a person authorizing the one that ships.

Book a walkthrough The governance model