Per-tenant token limits with configurable alert thresholds, automatic throttle and block escalation, and end-of-period burn-rate projections.