1. Circuit breaker on 429/403/credits exhausted stops request loops infinitely 2. Egress pinning: 1 account = 1 fixed IP prevents impossible travel triggers 3. MTU clamping in awg-agy overlay: inner <= outer - 80 prevents UDP fragmentation 4. IPv6 RA prevention on dual-stack: unreachable prefixes in gai.conf blocks Google leak 5. Failover relay hub pumpkin terminates BGP loops between Forest and Aurorix transit run-as-daemon.dev