on_failure="exit" to stop after a failed
node when no explicit recovery route matches. Fabro skips the unconditional
edge, checks configured retry targets, and ends the run as failed if no retry
target exists.
The default on_failure="route" preserves existing workflow behavior.