single client can exhaust filter pool under shared global cap #1018
Description
Current filter creation endpoints use one shared global pool of active filters. Since the endpoint is public, a single caller can repeatedly create filters until the pool is full, blocking unrelated clients from creating new filters.