When a stage fails, Alror shifts traffic back to stable and exits with code 2, so CI goes red instead of someone getting paged at 2 a.m. Tradeoff: it needs ~8 samples per stage, so very low-traffic…