Add safety limits to simulator

impl/e2e-tests/CONFIG.json

@@ -8,6 +8,8 @@
   },
   "epochStart": 0.5,
   "fairlyAllocateCreditFraction": 0.5,
+  "globalPrivacyBudgetPerEpoch": 8000000,
+  "impressionSiteQuotaPerEpoch": 4000000,
   "maxConversionSitesPerImpression": 3,
   "maxConversionCallersPerImpression": 3,
   "maxImpressionSitesForConversion": 3,
@@ -16,6 +18,6 @@
   "maxMatchValues": 10,
   "maxLookbackDays": 30,
   "maxHistogramSize": 5,
-  "privacyBudgetMicroEpsilons": 1000000,
+  "perSitePrivacyBudget": 1000000,
   "privacyBudgetEpochDays": 7
 }

impl/e2e-tests/single-epoch-budgeting.json

@@ -73,8 +73,8 @@
         "maxValue": 8,
         "credit": [3, 1]
       },
-      "$comment": "The preceding case should have subtracted the remaining 1/4 even though it was insufficient for the 1/2 required",
-      "expected": [0, 0, 0]
+      "$comment": "Budget was not consumed by the preceding case (insufficient budget causes no deduction), so 1/4 remains which is exactly the 1/4 required here",
+      "expected": [1, 3, 0]
     },
     {
       "seconds": 7,

impl/e2e.schema.json

@@ -27,6 +27,14 @@
           "minimum": 0,
           "exclusiveMaximum": 1
         },
+        "globalPrivacyBudgetPerEpoch": {
+          "type": "integer",
+          "minimum": 1
+        },
+        "impressionSiteQuotaPerEpoch": {
+          "type": "integer",
+          "minimum": 1
+        },
         "maxConversionCallersPerImpression": {
           "type": "integer",
           "minimum": 0
@@ -59,26 +67,28 @@
           "type": "integer",
           "minimum": 0
         },
-        "privacyBudgetEpochDays": {
+        "perSitePrivacyBudget": {
           "type": "integer",
           "minimum": 1
         },
-        "privacyBudgetMicroEpsilons": {
+        "privacyBudgetEpochDays": {
           "type": "integer",
           "minimum": 1
         }
       },
       "required": [
         "aggregationServices",
+        "globalPrivacyBudgetPerEpoch",
+        "impressionSiteQuotaPerEpoch",
         "maxConversionCallersPerImpression",
         "maxConversionSitesPerImpression",
         "maxCreditSize",
         "maxHistogramSize",
         "maxImpressionSitesForConversion",
         "maxImpressionCallersForConversion",
         "maxMatchValues",
-        "privacyBudgetEpochDays",
-        "privacyBudgetMicroEpsilons"
+        "perSitePrivacyBudget",
+        "privacyBudgetEpochDays"
       ]
     },
     {

impl/index.html

@@ -146,20 +146,17 @@ <h2>Time: <time></time></h2>
             <button>Clear Site Data as Site</button>
           </line>
         </form>
+        <line id="epoch-start" style="display: none"
+          ><a href="https://w3c.github.io/attribution/#epoch-start-time"
+            >Epoch start time</a
+          >: <time></time
+        ></line>
         <line id="last-clear" style="display: none"
           ><a href="https://w3c.github.io/attribution/#last-clear"
             >Last history clear</a
           >: <time></time
         ></line>
       </section>
-      <section>
-        <h2>
-          <a href="https://w3c.github.io/attribution/#s-epoch-start"
-            >Epoch Starts</a
-          >
-        </h2>
-        <dl id="epochStarts"></dl>
-      </section>
       <section>
         <h2>
           <a href="https://w3c.github.io/attribution/#dp-budget"