fn check_limits(requested: &Limits, allowed: &Limits) -> Vec<FailedLimit>