A breaker watches a failing dependency and stops calling it. Break the payments API and watch the circuit trip, then recover.
Measured as shipped: p99 127ms, 0% of requests failing, 78/s answered.