Struct Budget 

pub struct Budget {
    pub max_nodes: u64,
    pub max_depth: u64,
    pub max_array_len: u64,
    pub max_keys: u64,
    pub max_wall_ms: u64,
    pub max_value_size: u64,
    pub max_total_value_size: u64,
}

Runtime resource limits enforced by the evaluator accountant (spec/budgets.md §2, C-037). Every field 0 means unlimited — the embedder accepts the risk explicitly.

Fields

max_nodes: u64

Maximum IR nodes visited (arena-length pre-check).

max_depth: u64

Maximum value nesting depth (reference-aware).

max_array_len: u64

Longest single array.

max_keys: u64

Total value-table keys across the arena (schema tables excluded: they are metadata, validated separately).

max_wall_ms: u64

Wall-clock milliseconds for the whole evaluation.

max_value_size: u64

Maximum materialized value size in data units (scalars and string bytes), counting reference expansion: each Ref clone costs its target’s bound. Kills exponential blowup (billion-laughs class) before anything materializes.

max_total_value_size: u64

Maximum cumulative materialized size across the whole evaluation (same units). Per-node bounds cap each clone; this caps their sum — many aliases of one large value trip here even when every node is individually fine.

Implementations

impl Budget

pub fn wall_deadline(&self) -> Option<Instant>

Absolute evaluation deadline, or None when the wall-clock budget is disabled (max_wall_ms == 0). Saturating: absurd configured durations degrade to no deadline instead of panicking on Instant overflow.

Platform delta (G-003): Instant aborts on wasm32-unknown-unknown, so wall-clock degrades to disabled there (this function returns None). Count, depth, array, key, and value-size budgets still bound execution, and the regex crate guarantees linear-time matching, so no wall-clock backstop is needed for termination on that target; hosts enforce their own timeouts (Worker terminate pattern). See wall_supported.

pub fn wall_supported() -> bool

False on targets without a monotonic clock (wasm32-unknown-unknown) and under Miri (its mock clock advances with interpreted work, so any wall budget would trip spuriously while count, depth, array, key, and value-size budgets still bind execution there): wall_deadline degrades to None in both cases. Hosts must check this when they promise wall-clock enforcement to their own callers.

Trait Implementations

impl Clone for Budget

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Budget

impl Debug for Budget

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Budget

fn default() -> Self

Shipped profile: tight enough for CI and serverless loops, with headroom over the C-055 10k-node performance target.

impl Eq for Budget

impl PartialEq for Budget

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Budget