20 ops within the first 3 seconds is more than enough for any legitimate
initialization sequence (subscribe, fetch profile, query relays). Exceeding
this indicates automated request flooding and triggers the block action
(BURST-02). Value chosen to tolerate brief SDK setup bursts while stopping
malicious behavior.
Default init-burst guard operation cap: 20 operations.
20 ops within the first 3 seconds is more than enough for any legitimate initialization sequence (subscribe, fetch profile, query relays). Exceeding this indicates automated request flooding and triggers the
blockaction (BURST-02). Value chosen to tolerate brief SDK setup bursts while stopping malicious behavior.