must-revalidate

Once content becomes stale, the cache must revalidate with the origin before serving it. The cache cannot serve stale content even if the origin is unreachable. This ensures users never see outdated content, but can cause errors if the origin is down.