RateLimiter::updateRateParameters recomputs the bucket from available(), which clamps negative balances to zero. This means any outstanding borrowed debt from queued waiters is silently forgiven on every rate/burst parameter update, and new arrivals are admitted against capacity that sleeping waiters have already reserved.