Function: assertAuditLimit()

> assertAuditLimit(limit): asserts limit is number | undefined

Throws unless limit is absent or a non-negative safe integer.

AuditQuery.limit is typed number, but handlers routinely forward a raw query-string value; a driver that builds SQL from it must never receive a string. Audit validates every read, and the bundled drivers validate again so a store called directly is equally safe.