Treat your frontend as an untrusted agent: enforce per-client throttles…

Treat your frontend as an untrusted agent: enforce per-client throttles, idempotent handlers, client-friendly backoff, and database guards that assume machine-speed requests. A recent React render-loop that fired 100k identical requests shows observability spotted it, but hard limits are what keep a single buggy UI from melting CPUs. The practical move is boring but effective: implement per-client throttles and cheap write-side protections so one UI bug returns noisy 429s instead of a crash.