Half-open state.

the two-minute refresher

• Reached from OPEN once the recovery timeout passes.
• Lets one (or a few) trial requests through to the dependency.
• Success → CLOSED and normal traffic; failure → OPEN again, and the timer restarts.
• Admitting only a few probes avoids a thundering herd on a just-recovered service.