https://epcis.dev/errors/rate-limited
The caller sent more requests inside the policy window than the published ceiling permits, so this one was refused. The ceiling is not a secret and was never meant to be discovered by hitting it: it rides every governed response as a RateLimit-Policy field, and it is published as a real number per auth state at /limits and in the door's Offer.
Wait the interval named by Retry-After and repeat the identical call — nothing about it was wrong and nothing was metered. To avoid the refusal, read the quota and window from the RateLimit-Policy field of any response, or from /limits, and pace against it.