HttpQueryGuard

The HTTP adapter's side of a query: what happens to the request before the gateway and to the response after it. The HTTP budget itself (sizes, filter nodes and values, expensive operators) belongs to the gateway's entry policy, which admission checks; of binds this guard to it, so the rows the guard lets through, the list default it applies and the descriptor limits all follow the budget admission enforces.

strictCountFilter rejects a count request body whose root names neither op nor operator; off by default, such a body is read as a legacy condition and counts every row.