VideoTracker::set_budget (default 2 GiB of state, optional seconds per
propagate call) stops with Error::Budget; state_bytes reports what it holds.
Two runs of the same prompts give bit-identical masks.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>