Right but "guaranteed to terminate" is not a useful property. You could write a program that terminates... after a billion years.

You can estimate cost of CEL program using static analysis before running it. "estimate" only because size of runtime data is generally unknown (but obv you could limit that).