The per-workspace anonymous share-AI cost cap failed OPEN on a Redis error (return true => admit), so a Redis outage removed the cap entirely (unmetered billable anonymous calls). The feature is optional, so unavailability is harmless: fail CLOSED (return false => controller 429s) instead. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>