AIKIDO-2026-735017

TL;DR

The ExposureSampling component in the shared Rust core deduplicates exposure events using an in-memory set keyed by an exposure sampling key. Entries are added for every unique key and the set is only emptied on a periodic reset or after it grows past a fixed size, so memory accumulates with the number of distinct keys seen between resets. Applications that produce many unique exposure keys, such as evaluating gates or experiments for high-cardinality per-request users, can drive unbounded memory growth and exhaust process memory. The fix replaces the unbounded set with a bounded LruCache and adds a configurable exposure_dedupe_max_keys cap that evicts least-recently-used entries once the limit is reached.