Our rate limiter lets you through when it breaks, and it never learns your email address

18 burst rules in one object, keys hashed before they leave the process, a one second timeout that fails open, and the same rule set exposed three ways because three callers report failure differently.