Relay
If the current model is marked down (two HTTP or transport failures in the window), the next fb: link that exists in the registry and has a key is chosen. The hop happens here, before a token is spent, never mid-stream. The failed model is not exiled: its counter resets when a later turn of its own answers again.