A production rate limiter also needs an explicit failure policy. When Redis is slow or unavailable, should the service fail open, fail closed, or temporarily use a local fallback? The correct answer depends on whether availability, cost protection, or abuse prevention is the higher priority.