Fallback sounds simple until it starts hiding the wrong failure. Two OpenClaw PRs opened within 19 seconds of each other on June 21 make the distinction unusually clear: rotate providers when the provider fails, but do not burn fallback capacity when the local runtime broke. That line matters because agent