Refuse to pay on a stale price
The guard that turns a dead price feed into a delayed payout instead of a wrong one. Fail closed, log loudly, retry later.
3 entries
The guard that turns a dead price feed into a delayed payout instead of a wrong one. Fail closed, log loudly, retry later.
One API returning a wrong number should not decide what you pay. Three sources and a median makes a single bad quote irrelevant.
Auto-pay when the API answers, hold when it does not, and never refund on a timeout. The three-state queue that keeps a faucet solvent.