The admission decision depends on a rolling per-user history. Implement the throttle so attempts at the edge of the window expire at the right time and users do not share a quota.
Build the implementation in Go under /app, with /app/run.sh as its entry point. Read one JSON request from standard input and write one JSON result to standard output. Input has positive integer limit and window plus attempts with user string and nondecreasing integer time. Admit an attempt only when fewer than limit earlier admitted attempts for that user lie in (time-window,time]. Rejected attempts do not consume quota; exact window expiry frees a slot. Return admission booleans. Reject invalid policy, boolean/noninteger times or a decreasing clock.
Reject inputs that violate an explicit validation rule with exit status 2, no standard output, and {"error":"invalid_input"} on standard error. For valid input, exit with status 0. Keep the implementation reusable for new inputs; it must work offline and must not depend on the example data being the only data it receives.
Repair or replace the unfinished /app/run.sh and add source files under /app. Malformed JSON must use the same invalid-input response. Do not read /tests or /oracle from the application.