Tenant config loader in the settings service
Your task
The settings service reads a tenant's config file on every request, about 300 requests a second across all tenants. Tenants edit these files by hand, so a malformed one shows up a few times a day.
What do you flag before this ships?