Rate limiting: Specification

Caller-scoped token-bucket quotas with distinct 429 and 503 classes, Retry-After on throttle, burst versus sustained windows, and tenant-fair sharing that never discloses a neighbor's identity.

Published Sep 12, 2026