pub const MAX_LOCKOUT_BACKOFF: Duration;Expand description
The longest a lockout may silence this client, whatever Retry-After said.
A back-off is a safety mechanism, and an unclamped one is a denial of
service with extra steps: Retry-After: 86400 would latch a silent
twenty-four-hour outage of the agent’s reconciliation loop, clearable only by
AuthenticatedClient::clear_lockout. Fifteen minutes is far longer than any
back-off GitHub documents for the authentication lockout this latches on, and
short enough that a hostile or simply wrong header cannot take the product
down for a shift. Honouring a header without a ceiling is trusting a remote
party with the product’s availability.