Constant FS_MAX_DECOMPRESSED 

pub const FS_MAX_DECOMPRESSED: usize = crate::MAX_DECOMPRESSED; // 67_108_864usize

Cap on any single LZ4-decompressed fs payload — the protocol-wide crate::MAX_DECOMPRESSED guard (docs/protocol.md). Checked against the prepended size before allocating, so a hostile or corrupt length cannot force a giant allocation (the terminal path has the same guard). Large trees arrive as many bounded updates, never one huge one; content records are bounded by the sync’s inline_max (16 MiB default).