Fix MessageDeduplicator max_size enforcement

tests/gateway/test_message_deduplicator.py

@@ -77,6 +77,19 @@ class TestMessageDeduplicatorTTL:
         assert "old-0" not in dedup._seen
         assert "new-0" in dedup._seen
 
+    def test_max_size_eviction_caps_fresh_entries(self):
+        """Fresh entries must still be capped to max_size on overflow."""
+        dedup = MessageDeduplicator(max_size=2, ttl_seconds=60)
+
+        dedup.is_duplicate("msg-1")
+        dedup.is_duplicate("msg-2")
+        dedup.is_duplicate("msg-3")
+
+        assert len(dedup._seen) == 2
+        assert "msg-1" not in dedup._seen
+        assert "msg-2" in dedup._seen
+        assert "msg-3" in dedup._seen
+
     def test_ttl_zero_means_no_dedup(self):
         """With TTL=0, all entries expire immediately."""
         dedup = MessageDeduplicator(ttl_seconds=0)