This is pretty normal behaviour in large scale software. We add 'circuit breakers' (usually time, memory and rate based) that prevent denial of service attacks

This is pretty normal behaviour in large scale software. We add 'circuit breakers' (usually time, memory and rate based) that prevent denial of service attacks and stop exposed algorithms breaking sensible time limits per request. The last thing you want is one customer causing quality of service problems for another.