reslimit_prescan report — 7 file(s), 19 finding(s)

HIGH   RL-REQ-ALLOC    ./go/proxy.go:3  request-sized make() allocation (from line 2)
       | buf := make([]byte, n)
HIGH   RL-REQ-READ     ./go/proxy.go:4  request-derived byte-count consume (io.CopyN/LimitReader) (from line 2)
       | io.CopyN(w, src, n)
HIGH   RL-REQ-ALLOC    ./java/Srv.java:4  request-sized array/collection allocation (from line 3)
       | byte[] b = new byte[n];
HIGH   RL-REQ-ALLOC    ./js/api.js:3  request-sized array/buffer allocation (from line 2)
       | const tile = new Uint8Array(n);
HIGH   RL-REQ-ALLOC    ./js/api.js:4  request-sized string repeat/pad — memory blowup (from line 2)
       | res.send("x".repeat(n));
HIGH   RL-REQ-ALLOC    ./php/rep.php:3  request-sized string/array build (from line 2)
       | $s = str_repeat('x', $n);
HIGH   RL-REQ-READ     ./php/rep.php:4  request-derived byte-count read (from line 2)
       | $d = fread($h, $n);
HIGH   RL-REQ-ALLOC    ./py/img.py:7  request-sized bytes()/bytearray() allocation (from line 6)
       | buf = bytes(n * 4096)
HIGH   RL-REQ-ALLOC    ./sh/expand.sh:3  request-sized shell expand/read (from line 2)
       | seq 1 $n | while read i; do work; done
HIGH   RL-REQ-ALLOC    ./sh/expand.sh:5  request-sized shell expand/read
       | dd if=/dev/zero of=out.bin bs=1M count=$3
MEDIUM RL-REQ-SLEEP    ./java/Srv.java:9  request-derived delay — worker-slot hold (from line 8)
       | Thread.sleep(ms);
MEDIUM RL-REQ-PAGE     ./js/api.js:9  request-derived result-set cap — unbounded read (from line 8)
       | db.find().limit(limit);
MEDIUM RL-REQ-SLEEP    ./js/api.js:12  request-derived delay — worker-slot hold
       | setTimeout(poll, req.body.delay);
MEDIUM RL-REQ-SLEEP    ./php/rep.php:5  request-derived delay — worker-slot hold (from line 2)
       | usleep($n);
MEDIUM RL-REQ-PAGE     ./py/img.py:13  request-derived result-set cap — unbounded read (from line 12)
       | rows = db.query(Item).limit(n).all()
MEDIUM RL-REQ-SLEEP    ./py/img.py:19  request-derived delay — worker-slot hold (from line 18)
       | time.sleep(delay)
MEDIUM RL-REQ-LOOP     ./py/img.py:34  request-derived loop bound range() (from line 33)
       | for i in range(n):
MEDIUM RL-REQ-SLEEP    ./sh/expand.sh:4  request-derived shell sleep — worker-slot hold
       | sleep $2
LOW    RL-DECOMP       ./py/img.py:41  declared-size 'expected_size' (line 40) reaches a consume/alloc — declared != actual; cap before use
       | data = f.read(expected_size)

scope: deterministic pre-scan — flags per-request resource-burn shapes for review; not an audit, clean != exhaustion-free