How should rate limiting be applied in a production system?

Choose limits by identity and cost, return clear retry information, support bursts deliberately, and observe rejected traffic. The implementation should be justified by measurable requirements, kept as simple as the problem allows, and validated with realistic tests, telemetry, failure handling, and documented tradeoffs.