No-Code SaaS Automation Platform  ·  View 12 of 21  ·  Runtime

Critical Flow — One Run With a Rate Limit

The ordinary case, drawn with a 429 in the middle of it, because a 429 is the ordinary case.

Editable source SVG draw.io All views
CRM Push endpoint Event log Admission Step runner Step ledger Quota governor Sheets API 1. signed delivery 2. verify signature 3. commit event 4. 200 OK 5. admit once 6. lease run 7. step 1 intent 8. effect and key 9. governed write 10. 429 Retry-After 11. park until T 12. parked, not failed 13. retry, same key 14. governed write 15. 201 Created 16. outcome 17. step 1 done Critical Flow — One Run, With a Rate Limit In It The park consumes no worker and no retry budget, and the second attempt reuses the effect key - so the row is written once. v 1.0 · owner Integration Platform Architecture · date 2026-10

What this view proves

  • The push endpoint acknowledges the provider after the durable commit and before any execution — which is how a p99 250 ms acknowledgement fits inside every common provider delivery timeout while the run itself may take minutes.
  • The rate limit is a park, not a failure: it writes a ledger entry, consumes no worker, and does not spend the step's retry budget.
  • The second attempt reuses the same effect key, so the row is written once. Without the key this diagram would have to show a duplicate or a gap.

Assumptions

  • Sheets-class actions are in the idempotent class. For a checkable action the park would be followed by a read-back, and for an unsafe one by a prompt to the author — view 14 draws all three.
  • Push-triggered first step begins within p95 3 s of acknowledgement.

Risks

  • Two synchronously replicated ledger writes per step is the platform's primary scaling constraint at 12,000 steps/second, and the cost the critical design decision knowingly buys.