A company exposes a proprietary image-classification model through a public REST API. Security monitoring reveals that a single API consumer has submitted millions of systematically varied inputs over several weeks, recording each prediction and confidence score. Analysts suspect the client is attempting to reconstruct a functionally equivalent copy of the model. Which control most directly mitigates this model-extraction (model theft) threat while keeping the API usable for legitimate customers?