What you really want is "can be completed after a certain amount of time", not "can be cancelled". You don't want iam policy rules to be skipped because they took too long.

▲

IshKebab an hour ago | parent [-]

Well CEL doesn't offer that guarantee. For any given "certain amount of time" you can write a CEL filter that takes longer.

	▲	dilyevsky an hour ago \| parent [-]
		See my other comment - you can refuse to accept CEL filters that take too long to begin with.