This issue was caused by a rollout of new code that contained a bug for some combinations of feature flags and request data. This should have been caught by other safeguards, but due to an unrelated change in the system those safeguards no longer triggered in this case. Improvements to the affected systems have been scheduled.