Constant MAX_ENTRY_UNCOMPRESSED_BYTES 

const MAX_ENTRY_UNCOMPRESSED_BYTES: u64 = _; // 10_485_760u64

Per-entry decompressed-size cap. Generous for any legitimate instructions/SKILL.md/context file (10 MB of text is already an absurdly large single bundle component) while bounding how much a single malicious entry can force into memory.