Rate limiting without the hand-waving

Rate limiting is less about picking an algorithm and more about deciding what fairness means for your product. This note breaks the problem into identity, budget, time window, failure behavior, and observability.

Start with the smallest rule you can explain to a user. Then measure the traffic you reject before adding cleverness.