01 / VIP ORDER CATALOG
GET /orders/order-hot-901
SWARM: reader-00..35 (36× Catalog Sub-Agents)
36x burst
RAW ENDPOINT · STANDBY
Raw endpoint: 36 burst queries hitting catalog backend without singleflight or admission queue (Risk: 429 storm)
BEFORE
36 duplicate SKU reads → 429 overload storm
AFTER
Singleflight coalesced + admission queue cap=3
02 / STOCK LEDGER
POST /inventory/sku-77
SWARM: writer-00..07 (8× Inventory Writers)
T1T2T3T4..T8fenced leases
RAW ENDPOINT · STANDBY
Raw mutator: 8 parallel writers mutating SKU stock concurrently without CAS or leases (Risk: silent lost updates)
BEFORE
8 concurrent SKU decrements → silent lost writes
AFTER
Fenced lease tokens + CAS version check v0→v8
03 / SHIPMENT TRACER
GET /shipments/trace-hop
SWARM: tracer-d0..d4 (2^d Carrier Sub-Agents)
d0→d1→d2→d3✂d4
RAW ENDPOINT · STANDBY
Unbounded tree: Recursive carrier hop tracers expanding without max_depth budget (Risk: exponential fan-out)
BEFORE
Runaway carrier tree spawns 31 calls to depth d=4
AFTER
Goal budget halts recursion cleanly at max_depth=3
04 / REFUND & AUDIT GATE
DELETE /log + POST /refund ($280)
SWARM: reader-audit-01 + support-lead-01
DEL:DENY$280:HOLDRBAC + Gate
RAW ENDPOINT · STANDBY
Ungated actions: Read-only agent can delete audit log; $280 VIP refund auto-executes without human sign-off
BEFORE
Audit log deleted + $280 refund auto-executed!
AFTER
DELETE denied (read_only) · $280 paused for human