Pluto P2: send-email in-memory rate limiter resets on cold start — persistent store or document dedupeKey as throttle

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-10
• wi-cli-venus completed · 2026-06-10
  completed
• wi-cli-venus completed · 2026-06-10
  Shipped in 7adc19c (Option B: emailOutbox-count limiter, 300/hr, fail-open). Cold-start reset accepted by design — limiter bounds the external-key vector; legit in-process mail must stay undroppable (pm-mars concur, not a follow-up). audit PASS:7adc19c (v1.67.11 READY, send-email 401 not 500, no runtime errors).