Admission control protects recovery

A busy service26 needs a way to reject incoming work. Callers must respect its signal instead of immediately amplifying the same overload.

Book basis: B433, B1233.

Failure it prevents

An overloaded service keeps accepting work and extends its own outage.

Our Effect 4.0.0 reading

Queue and Semaphore offer local capacity controls. They do not choose the ingress response or implement caller cooperation. Model overload modes explicitly when needed.

Source: packages/effect/src/Queue.ts, packages/effect/src/Semaphore.ts.

How to check

Exceed capacity. Observe a truthful refusal or durable deferral, bounded backlog, and recovery after demand falls. This check is our proposal. The books do not prescribe it.

Continue with Retry load needs a budget10, Backpressure reaches the producer10.

Connect this to the existing rat-stack guidance23.

Use the durability skill for the full review. Return to the durability index34.

Sources

  1. Nygard, Michael T. Release It!: Design and Deploy Production-Ready Software. Pragmatic Bookshelf, 2007.. Pragmatic Bookshelf. §4.4 Unbounded Result Sets; Chapter 5 Stability Patterns: §5.1 Timeouts, §5.2 Circuit Breaker, §5.3 Bulkheads, §5.4 Steady State, §5.5 Fail Fast, §5.6 Handshaking, §5.7 Test Harness, §5.8 Decoupling Middleware. Accessed 2026-10-23.
  2. Beyer, Betsy; Jones, Chris; Petoff, Jennifer; Murphy, Niall Richard, editors. Site Reliability Engineering: How Google Runs Production Systems. O’Reilly, 2016.. O’Reilly. Chapter 3 Embracing Risk; Chapter 22 Addressing Cascading Failures (Mike Ulrich); Chapter 26 General Principles of SRE as Applied to Data Integrity; Chapter 27 Reliable Product Launches at Scale. Section-only excerpts limit detailed attribution. Accessed 2026-10-23.
  3. Effect contributors. Effect 4.0.0. Queue.ts. Effect-TS. Pinned source for our Effect mapping, not a claim from the book. Accessed 2026-10-23.
  4. Effect contributors. Effect 4.0.0. Semaphore.ts. Effect-TS. Pinned source for our Effect mapping, not a claim from the book. Accessed 2026-10-23.

Last changed 2026-10-23 in 58dc623. Source on GitHub. Change log.

Linked from

  1. Agent guide. An Effect stack so pure (aspirational) Kit Langton will blush.

    Admission control protects recovery — Refuse or defer work that cannot be served usefully under current load.

  2. Backpressure reaches the producer. Bounded consumption helps only when upstream respects waiting or refusal.

    Continue with Admission control protects recovery, Bulkheads isolate scarce capacity.¶

  3. Change log. What changed in the files served here, newest first.

    Admission control protects recovery — new page: docs(lore): land the durability wiki pages and bibliography

  4. Durability bibliography. Books, checked short quotations, source limits, and Effect mapping provenance.

    6 Handshaking¶

  5. Durability starts with a recovery record. A reading order for storage, replay, worker ownership, overload, and recovery tests.

    Admission control protects recovery: Refuse or defer work that cannot be served usefully under current load.¶

  6. Full agent guide. An Effect stack so pure (aspirational) Kit Langton will blush.
  7. Golden signals expose overload. Measure latency, traffic, errors, and saturation, including failed work.

    Continue with Dead letters need a return path, Admission control protects recovery.¶

  8. Rat Stack lore | rat-stack. Short, source-grounded notes on the ideas and decisions behind rat-stack.

    Admission control protects recovery — Refuse or defer work that cannot be served usefully under current load.

  9. Retry load needs a budget. One retry owner must control attempts, delay, and aggregate load.

    Continue with Circuit breakers have state, Admission control protects recovery.¶

  10. Source change history (log.md). The generated change log as Markdown.

    Admission control protects recovery — new page: docs(lore): land the durability wiki pages and bibliography