RecoverOS

Detector: 15-minute tumbling windows, EWMA baseline, fires at ≥3× baseline with ≥20 attempts and ≥15% absolute failure rate, after 8 warm-up windows; baseline freezes while open; closes below 2.1× for 2 consecutive windows; drains with 0–120s jitter. The outage button injects a synthetic attempt feed on one key and advances the window cadence — a warm-up alone is 120 minutes of live traffic. The detector, the thresholds, the holds and the drain are the production ones.