Files
blackroad-operating-system/services/codex/entries/019-rate-limit-calculus.md
Alexa Louise 9644737ba7 feat: Add domain architecture and extract core services from Prism Console
## Domain Architecture
- Complete domain-to-service mapping for 16 verified domains
- Subdomain architecture for blackroad.systems and blackroad.io
- GitHub organization mapping (BlackRoad-OS repos)
- Railway service-to-domain configuration
- DNS configuration templates for Cloudflare

## Extracted Services

### AIops Service (services/aiops/)
- Canary analysis for deployment validation
- Config drift detection
- Event correlation engine
- Auto-remediation with runbook mapping
- SLO budget management

### Analytics Service (services/analytics/)
- Rule-based anomaly detection with safe expression evaluation
- Cohort analysis with multi-metric aggregation
- Decision engine with credit budget constraints
- Narrative report generation

### Codex Governance (services/codex/)
- 82+ governance principles (entries)
- Codex Pantheon with 48+ agent archetypes
- Manifesto defining ethical framework

## Integration Points
- AIops → infra.blackroad.systems (blackroad-os-infra)
- Analytics → core.blackroad.systems (blackroad-os-core)
- Codex → operator.blackroad.systems (blackroad-os-operator)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-29 13:39:08 -06:00

1.1 KiB

Codex 19 — Rate-Limit Calculus — Bound Blast Radius

Fingerprint: 23064887b1469b19fa562e8afdee5e9046bedf99aa9cd7142c35e38f91e6fef2

Aim

Prove that no single client or tenant can overwhelm the system.

Core

  • Enforce token bucket policies with parameters ((r, b)): admit requests only when available tokens exceed the cost.
  • Bound worst-case load over window (T) by (rT + b).
  • Compose hierarchical rate limits by enforcing the minimum allowance across multiple buckets.

Runbook

  1. Assign per-principal ((r, b)) values based on risk class and business priority.
  2. Enforce limits locally and at edge layers while composing with upstream throttles.
  3. Measure effective demand and adjust parameters cautiously with safe step sizes.

Telemetry

  • Accepted versus dropped requests by principal.
  • Bucket occupancy distributions and refill latency.
  • Impact on tail latency and error budgets.

Failsafes

  • Clamp burst size (b) to a minimum when anomalies spike.
  • Shift excess load to queues or lotteries to preserve fairness under sustained attack.

Tagline: Throttle proof before throttle panic.