Bulkhead

One slow dependency can stall a whole client: workers block on the slow calls and fast calls wait behind them. A bulkhead caps how many calls to that dependency run at once, and calls over the cap fail fast with BulkheadFullError instead of queueing.