Srujan Chidarla

CODEDISCIPLINE

Warming up

Building strength

Booting systems

Balancing load

Routing models

Syncing signals

Ready to ship

Back to research

Idea · Working note

What failover actually means when a product depends on six LLMs

A working note from JobHuntOS and Neocortex — not a paper, a question I keep running into.

Srujan Chidarla

Multi-provider routing is usually sold as “if Claude is down, call Gemini.” In a product, failover also means latency budgets, quality drift, cost cliffs, and what the user sees while the chain walks. I want a clearer model for that — not another wrapper SDK.

The question

JobHuntOS routes Claude, Gemini, and Groq with SSE streaming and provider failover. Neocortex pushes that further with a six-provider chain. The engineering is real. The research question is still open: what should “the request succeeded” mean when the model that answered is not the model you wanted?

Availability is the easy metric. Quality under substitution is the hard one. A fallback that returns in 400ms with a weaker model can be worse than a 2s wait for the primary — or better, if the user is mid-flow in a Chrome extension and the tab is about to background.

What I have observed shipping this

Timeouts and 429s are not the same failure. One is “try the next provider.” The other is “back off this key and maybe the whole vendor.” Treating them as one error class makes the chain look busy and still fail.

Streaming changes the contract. Once tokens have started, swapping providers mid-response is a different product than retrying before the first byte. Most router diagrams ignore that.

BYOK (bring your own key) makes failover a user-policy problem, not just an infra one. Some users have only one key. The honest UI is “this provider is down,” not a silent hop they did not consent to.

A sketch of the model I want

Score each attempt on four axes: time-to-first-token, cost, a cheap quality proxy (length, schema validity, or a tiny grader), and user-visible interruption. Failover is then a policy over that score, not a linked list of vendors.

I do not have a dataset or a paper here. I have production traces from my own products and a suspicion that “N providers” is the wrong unit. The unit is interruption.

Open questions

  • When is a silent fallback worse than a visible retry?
  • Can a tiny on-device grader catch quality cliffs cheaply enough to run on every hop?
  • How should BYOK products express failover policy without turning settings into an SRE console?