A municipal permit portal’s checkout must still return a useful response when the optional recommendations service is down. Which design approach best isolates that failure?
Select an answer to reveal the explanation.
Short Explanation
Checkout is the main road; recommendations are a side street. When the side street floods, traffic should still move on the main road—with a simpler view—rather than closing the whole city.
Full Explanation
Cloud-native design isolates failure so a dark collaborator does not take down the critical path. Bulkheads, timeouts, and fail-soft responses let checkout succeed in a degraded mode when recommendations are unavailable. Hard synchronous coupling or shared resource pools turn one outage into a site-wide outage.