Rule #1 is the one that bites in checkout code. Treating MS_UNAVAILABLE as "invalid" turns a German node outage into a rejected B2B customer. Flagging the order for review instead of blocking is a sensible default. Do you also store which member-state node timed out, so a support person can see why VAT was applied provisionally?