An agent called my payment API 50,000 times in 90 seconds. Here's what broke.

A true story of what happens when you secure AI agents like humans — and how we rebuilt authorization from scratch.