Skip to main content
Read GET /v1/configuration before starting workers. Its operational_profile contains the effective request, concurrency, queue, payload, export and retention limits for your workspace and environment. All keys share those limits. The downloadable profile contains synthetic test values; it is not your production allocation.

Separate HTTP requests from background processing

Every 429 includes Retry-After in whole seconds. Capacity errors also identify the group, reason, effective limit and profile revision. Back off for at least that delay, add jitter, and retain the same payload and idempotency key. Do not increase concurrency in response to throttling. Global service overload returns retryable 503 and does not establish acceptance. Admission, durable command receipt and queue reservation are atomic. Resolve an existing idempotent receipt before applying fresh admission limits: an already accepted command remains the same resource during saturation. A rejected new command creates no resource, receipt or debit. A timeout is ambiguous; follow request recovery before submitting anything else. Queue and running timers pause only while the resource is explicitly waiting for borrower action or credits. They do not restart on internal retry. On resumption, work re-enters the ready queue under its original accepted profile and remaining timer budgets. Existing ready work is not displaced by a later capacity reduction. No partial risk package is published as a successful result after a processing timeout. Insights charges only on atomic result publication. Signal’s existing monthly charge is not a per-run charge and its billing rules remain unchanged. For scheduled Signal work, record a monitoring run even when admission fails. A capacity-blocked scheduled evaluation is a skipped run with a structured capacity failure and a normal run notification; it cannot silently advance successful-sync timestamps. Future permitted evaluations continue on the configured cadence. Monitor enrollment uses the monitoring capacity group; source collection required by an Origination is part of its Origination job. Export work uses the export group. Limits apply independently to each group.

Plan a portfolio import

  1. Read the profile and choose a shared, bounded worker pool. Coordinate workers across application replicas and API keys.
  2. Persist a durable institution work queue before sending commands. One intended action has one stable idempotency key.
  3. Keep HTTP concurrency below max_in_flight_requests and request rates below each rolling budget. Leave capacity for status, receipt, event and billing reconciliation reads.
  4. Consume completion events and periodically reconcile the durable feed. Poll only within the configured intervals.
  5. Use snapshot exports for history and incremental data changes for ongoing updates. Do not repeatedly redownload a borrower’s complete history.
  6. Track throttled requests, queue failures, oldest unfinished work, cursor expiry and source freshness independently.
For a page size of 100, one million records require at least 10,000 collection reads before any detail fetches. This is arithmetic, not a throughput promise. Exports reduce HTTP request volume and byte-part downloads bound transfer memory.

Processing targets and changes

capacity.targets supplies environment-specific p95 and/or p99 elapsed-time targets and the measurement window. Exactly one capacity entry exists for each workload group; target pairs of group and percentile are unique. Targets cover admitted ready work from first queue entry to terminal state, excluding explicit credit/action pauses and including provider waiting while running. Timeouts and processing failures count as misses; they are never removed to improve a percentile. These are configured objectives, not observed latency measurements or guarantees that every provider completes. Capture profile ID/version when commands are accepted. Queue deadlines and artifact part sizes remain bound to that profile. Request budgets use the currently effective profile. An administrator coordinates disruptive allocation changes through your registered technical contacts using the notice period returned in configuration.contract. Immediate authorization revocation and security containment take precedence. The SLA defines availability and support obligations separately.