Admission control for /submit: each request counts against a caller key and a denial
answers 429 with retry-after. The default key is the authenticated principal, else the
client address the Node bridge stamps; hosts on other runtimes supply keyFor. A throwing
limiter fails open — degraded protection, not degraded availability — and counts
economy.ratelimit.degraded.
Admission control for
/submit: each request counts against a caller key and a denial answers 429 with retry-after. The default key is the authenticated principal, else the client address the Node bridge stamps; hosts on other runtimes supplykeyFor. A throwing limiter fails open — degraded protection, not degraded availability — and countseconomy.ratelimit.degraded.