The Guardrail's Failure Mode Is Always "Allow"

Guardrails get tested for what they catch, never for what happens when the guardrail service itself times out. That untested path defaults to allow.