The JSON rate cap (API_MAX=4/hour) is hardcoded in Python, not settable in limiter.toml; pass_ip is the only bypass. Rootless podman strips the client IP on published-port hits (the container sees a slirp source), so local subagents must present a pass_ip source. Document the slirp IP-strip, the pass_ip expansion, and the root-owned config file (one-off sudo cp to update).