Protect the budget and cap abuse.
Scope
- slowapi rate limiting scaled to cost (submit tight, reads loose)
- Daily spend cap that refuses model calls past a ceiling
- Request body size limit (413 on oversized payloads)
Acceptance
- 11 submits/min → 11th returns 429
- Exceeding the cap → model calls refuse with the cap error
- POST > 1MB body → 413
Protect the budget and cap abuse.
Scope
Acceptance