Struct Limits 

pub struct Limits {
    pub max_file_bytes: u64,
    pub parse_timeout: Duration,
    pub max_subprocess_bytes: Option<u64>,
    pub max_candidates: usize,
    pub posting_cap: usize,
    pub max_component: usize,
    pub verification_budget: usize,
    pub max_alignment_cells: usize,
    pub helper_timeout: Duration,
    pub execution: ExecutionPolicy,
}

The ceilings a run works under.

Separate from the execution policy because they answer a different question: the policy says what may run, and these say how much a run may spend on input that turns out to be hostile rather than merely large.

Fields

max_file_bytes: u64

Largest file read.

parse_timeout: Duration

Longest a single file may be parsed for.

max_subprocess_bytes: Option<u64>

Largest amount of memory a subprocess may use, where the platform can say so.

max_candidates: usize

Largest number of candidate pairs generated before a run gives up on generating more and says so.

posting_cap: usize

Longest posting list or fragment class admitted to candidate pairing.

This bounds the fan-out before the pair budget applies. Keeping it separate makes the untrusted profile cap both the number of lists and the work one high-frequency list can create.

max_component: usize

Largest related component refined as one group.

Complete-linkage refinement can repeatedly compare a component, so a distinct ceiling keeps an adversarially large related set bounded even after candidate generation has stopped.

verification_budget: usize

Largest distinct Structural pairs admitted to precise verification.

max_alignment_cells: usize

Largest dynamic-programming cell count for one Structural alignment.

helper_timeout: Duration

Longest a compiler helper may spend answering for one source unit.

execution: ExecutionPolicy

What may run.

Implementations

impl Limits

pub fn untrusted() -> Self

The profile for a repository nobody vouches for.

Every ceiling lower than the default and nothing permitted to run. It is a starting point rather than a sandbox: it bounds what a hostile input can cost, and it cannot bound what a program does once something has agreed to run it, which is why it grants no execution at all.

pub fn is_at_most(&self, other: &Self) -> bool

Whether every ceiling here is at or below other’s.

A profile that claims to be stricter has to be stricter in every dimension; one that tightened a timeout while raising a size ceiling would be a different trade, not a stricter one.

Trait Implementations

impl Clone for Limits

fn clone(&self) -> Limits

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Limits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Limits

fn default() -> Self

Returns the “default value” for a type.

impl Eq for Limits

impl PartialEq for Limits

fn eq(&self, other: &Limits) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Limits