ThrottleMiddleware
Corex\Http\Middleware\ThrottleMiddleware · class · Core layer
Rate-limits requests by key: rejects once the per-key count reaches the limit within the window, otherwise increments and passes. State lives in a WP transient, so the count resets when the window expires (spec FR-009).