When a downstream service starts failing, what stops that failure from cascading to services that call it?

Resilience4j's Circuit Breaker trips after enough recent failures and fails fast instead of piling up waiting threads; the Bulkhead ensures only that dependency's allocated capacity is affected, not the whole application's — together they let the calling services stay healthy even while the one dependency struggles.