The Five Second Contract

Queueing looks harmless at first. A slow call holds a few threads, then a few more, and if left unchecked it can tip the whole system over.