This is not the bullwhip. Bullwhip is demand noise amplifying upstream in a healthy network. A ripple is one structural failure - an earthquake, a closed port, a dead DC - propagating downstream like a wave, eating buffer after buffer until shelves go empty. Pick a shock, watch the wave spread across the real network, and spend a limited budget on re-routing and buffers to contain it. Score = service protected minus money burned.
One structural failure propagates downstream, disabling capacity node by node - resilience, not demand noise. Bullwhip amplifies orders upstream; ripple destroys flow downstream.
Each node holds days-of-cover. When inflow drops, the node burns buffer, then passes the shortage on - the wave's speed is set by buffer depth.
Buffers buy time; only re-routing stops the wave. Spend early and switch paid lanes off the day the outage ends - TTR beats panic.
