Constant DEFAULT_SINCE_LIMIT 

pub const DEFAULT_SINCE_LIMIT: usize = 10_000; // 10_000usize

Default cap for since() when the caller passes limit == 0. Bounds the engine primitive itself so a stale/offline consumer can never force an unbounded materialization — the safety lives in the core, not the HTTP layer.