# 2.8 — Rate limiting Tier 1 + Tier 2 (GREEN)

Phase: 2 — Topology (Surface B)
Stage: GREEN

- [ ] Rate limiting Tier 1 (Cloudflare edge — WAF, Bot Fight Mode, per-IP rules) + Tier 2 (Kong `rate-limiting`, `policy: redis`, generous profile for topology)