pub fn read_regular_file_bounded(file: File, max_bytes: u64) -> Result<String>
Bound both the initial size and bytes actually read, including growth after opening. Oversized artifacts fail instead of returning partial text.