rate_budget

Sliding-window request limiter for agent tool calls.

What it mitigates

• Runaway loops and rapid retries
• Cost spikes from uncontrolled call volume
• Resource pressure during degraded states

Recommended defaults

Minimal config

moduleConfig:
  rate_budget:
    windowSec: 60
    maxCallsPerWindow: 60
    store:
      engine: sqlite   # sqlite | memory
      path: ./.radius/state.db
      required: false

Tuning strategy

• Increase limits only after measuring normal workload.
• Keep stricter caps for high-risk tools.
• Use SQLite store in subprocess hook mode to preserve counters across calls.
• Re-run pentest flood scenarios after each change.

Related modules

• kill_switch
• repetition_guard
• audit