Read the four-byte response length explicitly, acquire bytes from one 32 MiB connector-wide budget before buffering, and require exact body plus EOF. One-way requests now check EOF without allocating an 8 MiB decoder. Test Plan: - just test - focused complete, oversized, truncated, trailing, one-way, and shared-budget tests - git diff --check