feat: rate limit resilience + formatter safety + fail-safe hard-caps

c0072b1