I just checked out Warrant and your docs are very clean :)
One limiting factor for my adoption of Warrant would be that my application would need to perform auth on each request from each user, which in total may be on the scale of thousands of requests per second for my application. When I looked at the pricing section, Warrant's Standard Plan costs $1 per 1,000 API requests / mo. This would be too expensive for my use case, but perhaps I am not the target customer...? sweat smile Regardless, I wish you the best of luck with Warrant!
I agree with what you said about rate limiting. Given that Warrant is also an API product, has rate limiting been something you have found to be a necessity already? What factors or indicators would push you to add rate limiting?