Slide 23 of 28
Part 4 — PreventionSlide 23
Slide 23 · Mitigation Matrix
Which mitigations address which failure patterns and scenarios.
Pattern / Scenario MIT01
Validation
MIT02
Circuit
Breaker
MIT03
Degrade
MIT04
Backoff
MIT05
Bulkhead
MIT06
Rate Limit
MIT07
Idempotent
MIT08
Monitor
MIT09
Chaos
P1 — Silent error propagation ● ◉ ● ● ◉
P2 — Error amplification ● ● ◉ ◉ ◉ ◉
P3 — Feedback loops ◉ ● ● ● ◉
P4 — Resource exhaustion ● ● ● ● ◉ ◉ ●
P5 — Dependency chain collapse ● ● ● ● ● ● ◉
P6 — Adversarial cascade ● ◉ ● ◉ ◉
● Primary mitigation — directly prevents or breaks this pattern ◉ Contributing mitigation — reduces severity or aids detection
Key insight from the matrix

MIT02 (circuit breakers) is the most broadly applicable control — it appears as a primary mitigation for 4 of the 6 failure patterns. It is the architectural equivalent of a pressure relief valve: when failure pressure builds up in one part of the system, the circuit opens and prevents it from spreading.

MIT01 (output validation) and MIT06 (rate limiting + confirmation) together cover both ends of the cascade — detection at the source and blast radius limitation at the terminal. Patterns 1 and 6 (silent propagation and adversarial stepping stone) have no circuit breaker as a primary control because the malicious/bad data isn't an availability failure — it's a content failure. Only content validation (MIT01) and action gating (MIT06) directly address content-based cascades.

Pattern 4 (resource exhaustion) requires the deepest set of controls: bulkhead isolation, circuit breaking, graceful degradation, exponential backoff with jitter, and chaos testing — all five are primary controls. Resource exhaustion cascades have the most self-reinforcing dynamics, requiring the most layered defense.

← Back Quiz →