fn windowless(doc: &Yaml, field: &str) -> Result<Search, String>Expand description
A rule’s embedded query document, with the four keys the engine owns refused rather than ignored.
over is the window and limit is always zero, so a from in the document
would be silently overwritten every tick — the exact class of mistake
known exists to catch one level up.