Constant DOCUMENT_MESSAGE_CAP 

pub const DOCUMENT_MESSAGE_CAP: i64 = 1000;

Maximum messages loaded per severity for a single document’s forensic view. A hostile or pathological document can carry millions of messages of one severity (observed in production: a single arXiv task with 1.6M warnings); loading them all would allocate gigabytes and hang the request — an unbounded per-request resource acquisition the design principles forbid. The view is a sample bounded by this cap; the true per-severity totals are reported separately (MessageCounts) so the cap is transparent, never silent.