`rate-limit-headers`

Requires concrete 2xx and 4xx responses to declare a recognized rate-limit header set.

Intent

Rate-limit metadata helps clients pace requests and recover before limits become repeated failures.

Every numeric status from 200–299 or 400–499 that contains none of these case-insensitive header sets:

Referenced responses are resolved.

Other status classes, nonnumeric range or default responses, or a response containing any complete accepted set.

responses:
  '200':
    description: OK

Diagnostic: 2xx and 4xx responses should define rate limiting headers.

Choose one supported convention:

responses:
  '200':
    description: OK
    headers:
      RateLimit:
        schema:
          type: string

profiles:
  default:
    rules:
      extends: [recommended]
      override:
        rate-limit-headers: warn

Nearby: define-429-response, retry-after-for-429.