Security
4 min read
Rate Limiting: Buckets, Windows and the Keys That Actually Matter
The honest three algorithms, layered key design including the abuse limits everyone forgets (per victim, not per attacker), the 429 contract, and operational rules — fail open, shadow mode, degrade before deny.
