policy-engine/sdk/rust/src/ffi.rs:539-544 stores builder.limits but nothing reads it; the old core/src/ffi.rs threaded it into the default dispatchers. Callers believe they have capped manifest URL fetches when they have not.
Found in the group review of the policy-engine retarget (#3939) and deferred from the follow-up (#3940).
policy-engine/sdk/rust/src/ffi.rs:539-544 stores builder.limits but nothing reads it; the old core/src/ffi.rs threaded it into the default dispatchers. Callers believe they have capped manifest URL fetches when they have not.
Found in the group review of the policy-engine retarget (#3939) and deferred from the follow-up (#3940).