fix(alarms): fetch/poll ceilings; truncation-semantics docs; log-format conformance

src/ZB.MOM.WW.MxGateway.Worker.Tests/MxAccess/WnWrapAlarmConsumerXmlTests.cs

@@ -496,6 +496,11 @@ public sealed class WnWrapAlarmConsumerXmlTests
     [InlineData("63", 1024)]
     [InlineData("64", 64)]
     [InlineData("4096", 4096)]
+    [InlineData("65536", 65536)]
+    // Above the ceiling: the x86 worker materializes the whole reply as one
+    // BSTR plus an XmlDocument, so an unbounded cap is an OOM on the STA.
+    [InlineData("65537", 1024)]
+    [InlineData("2147483647", 1024)]
     public void ResolveMaxAlarmsPerFetch_WithEnvironmentValue_FallsBackToDefaultWhenUnusable(
         string? environmentValue,
         int expected)
@@ -518,6 +523,32 @@ public sealed class WnWrapAlarmConsumerXmlTests
         }
     }
 
+    /// <summary>
+    ///     A galaxy parked above the cap truncates on every poll, so the
+    ///     warning must be throttled: two truncated polls inside one interval
+    ///     produce exactly one line, and the next one only after the full
+    ///     interval has elapsed.
+    /// </summary>
+    [Fact]
+    public void ShouldWarnTruncation_ThrottlesConsecutiveTruncatedPollsToOneWarningPerInterval()
+    {
+        // Seeded so the very first truncated poll always warns.
+        const long NeverWarned = -60_000;
+
+        // Poll 1 at t=0: warns, and records t=0 as the last warning.
+        Assert.True(WnWrapAlarmConsumer.ShouldWarnTruncation(0, NeverWarned));
+
+        // Poll 2 half a second later (the default cadence): suppressed.
+        Assert.False(WnWrapAlarmConsumer.ShouldWarnTruncation(500, 0));
+
+        // Still suppressed just shy of the interval...
+        Assert.False(WnWrapAlarmConsumer.ShouldWarnTruncation(59_999, 0));
+
+        // ...and allowed again exactly on it.
+        Assert.True(WnWrapAlarmConsumer.ShouldWarnTruncation(60_000, 0));
+        Assert.True(WnWrapAlarmConsumer.ShouldWarnTruncation(120_000, 60_000));
+    }
+
     /// <summary>
     ///     Builds a well-formed ALARM_RECORDS payload with
     ///     <paramref name="count"/> distinct alarms. GUIDs are the dashless