pub fn decode(path: &Path, budget: Duration) -> Result<Waveform, String>
Decode an explicitly selected local source with bounded memory and a wall-clock budget. The caller must validate source identity before and after this read.