Rate Limiting in Practice: The Algorithm Matters Less Than What You Return

Four algorithms, one race condition, and the header everyone gets wrong. What RFC 6585 actually says about 429, and why X-RateLimit-* is not the standard you think it is.