Backend & systems·Resilience and failure handling
the orchestrator asks whether the process is wedged and restarts the container when it stops answering.
Liveness probe
A health check whose failure means "kill and restart this instance". It should test only whether the process itself is stuck, never whether dependencies are reachable. A liveness probe that checks the database will restart every instance in the fleet during a database incident, turning a degradation into an outage.