0b9b99984e
- Add ## Purpose sections and convert delta headers to ## Requirements on all 25 specs - Add SHALL keywords to requirements missing them (gpx-import, planner-session, planner-journal-handoff) - Convert prose GPX format section to proper scenarios (no-go-areas) - Create specs/ delta files for 7 changes that were missing them (activity-photos, local-dev-stack, multi-day-routes, route-discovery, route-sharing, visual-redesign, waypoint-notes) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
19 lines
681 B
Markdown
19 lines
681 B
Markdown
## Purpose
|
|
|
|
Request rate limiting for Planner session creation and BRouter API calls to prevent abuse.
|
|
|
|
## Requirements
|
|
|
|
### Requirement: Session creation rate limit
|
|
The Planner SHALL limit session creation to 10 per IP per hour.
|
|
|
|
#### Scenario: Rate limit exceeded
|
|
- **WHEN** an IP creates more than 10 sessions in one hour
|
|
- **THEN** the server responds with 429 Too Many Requests
|
|
|
|
### Requirement: BRouter call rate limit
|
|
The Planner SHALL limit route computations to 60 per session per hour.
|
|
|
|
#### Scenario: Routing rate limit exceeded
|
|
- **WHEN** a session exceeds 60 BRouter calls in one hour
|
|
- **THEN** the server responds with 429 and the client shows a "slow down" message
|