Error budget

A quantified tolerance for failure that trades reliability against change velocity, letting a self-improving loop ship risky changes as long as failures stay within budget and are automatically reverted when exceeded.

grounded in: doctrine (principles.md): a change that passes the deploy gate but fails the Rust compile in CI is auto-reverted, not left to strand main — operating the loop within a tolerated failure margin.