Problem
search() accepts limit=-1 or limit=10_000 (and any prefetch_limit) with no guard before they reach query_points.
Where
src/tenantq/search.py (search: limit: int = 10, prefetch_limit: int = 50, passed straight into the query).
Acceptance
Add a failing test first calling search(..., limit=-1) and limit=10_000, expecting ValueError or clamping to a documented bound. Then fix.
Problem
search()acceptslimit=-1orlimit=10_000(and anyprefetch_limit) with no guard before they reachquery_points.Where
src/tenantq/search.py(search:limit: int = 10,prefetch_limit: int = 50, passed straight into the query).Acceptance
Add a failing test first calling
search(..., limit=-1)andlimit=10_000, expectingValueErroror clamping to a documented bound. Then fix.