Default cap. Chosen so a full linear scan stays fast enough to be invisible next to an LLM call, rather than as a memory limit.