What happens when you hit a limit
5 min
A limit refuses new work. It does not switch off what is already running.
The response
A refused request returns 429 with a Retry-After header and x-lunax-quota-* headers naming which resource ran out. Your client can back off correctly instead of guessing.
Running sites keep serving
Hitting a cap does not take your live site down. Killing a running site over a quota turns a billing question into an outage, which helps nobody. What stops is starting *new* billable work: a new sandbox, a new build, a new deployment.
When a meter is unavailable
If we cannot read a meter, we allow traffic to an existing site and refuse to start new billable work. Failing open on your visitors' traffic and closed on new spending is the safe direction for both sides.