pub const MAX_RECALL_CANDIDATES: usize = 500;
Maximum candidates a caller may request (server-side cap).