How do you protect LLM APIs from denial-of-service and cost exhaustion?

Abuse patterns

• Rate limits: Per user, per API key, per IP — with burst + daily token budgets.