How do you design an AI system that gracefully degrades when the model is unavailable?

Technical