Bounds portable artifact inputs before profiles are invoked or JSON is decoded.
Per-call keyword overrides are positive finite integers. Defaults bound page bytes, JSON values/depth, AST depth, block/binding/variant counts, profile and descriptor counts/bytes, manifests/projections, and individual/aggregate asset bytes. A caller can explicitly raise or lower them; another applicable site or producer ceiling still wins. No unlimited sentinel is accepted.
Native JSON is walked before canonical encoding. This bounds nesting and aggregate primitive size before the encoder allocates its output. Original manifest bytes are size/depth checked before decoding. These are admission budgets, not a bound on arbitrary work performed by a trusted host adapter.
Summary
Functions
Checks an observed resource against its admitted ceiling.
Bounds one page's native JSON and AST depth without invoking an adapter.
Bounds native JSON before checking its exact canonical byte size.
Validates closed positive overrides and supplies finite defaults.
Checks document, invocation and original-byte inputs without invoking a profile.
Types
@type t() :: %{required(atom()) => pos_integer()}
Validated resource ceilings for one artifact projection call.
Functions
@spec check(t(), atom(), non_neg_integer()) :: :ok | {:error, term()}
Checks an observed resource against its admitted ceiling.
Bounds one page's native JSON and AST depth without invoking an adapter.
Bounds native JSON before checking its exact canonical byte size.
Validates closed positive overrides and supplies finite defaults.
Checks document, invocation and original-byte inputs without invoking a profile.