Rate Limit and Resource Limit Review #39
Description
Why
Protect the service from abusive clients and runaway jobs.
Definition of Done
- Per‑user and per‑source request limits are enforced for sensitive routes.
- Maximum page size, maximum text size, and maximum tags per item are enforced.
- Worker enforces maximum attempts and maximum job lifetime.
- Clear error messages describe the limit and reset hints.
Tasks
- Audit routes and add missing limits.
- Add validation for sizes and cardinalities.
- Confirm worker limits are applied and logged.
- Add tests for allow, deny, and reset timing.