Instead of resetting at fixed boundaries, the window slides continuously with the current moment. A request is allowed only if fewer than the limit have arrived within the trailing window ending now. As time passes, old requests slide out of the window and free up capacity — there is no hard boundary a burst can exploit.