Function clamp 

fn clamp(seq: u64) -> i64

The lexicon’s seq, which is a signed integer where this counter is not.

A deployment that assigned more than nine quintillion frames has other problems; saturating is still the right answer, because the alternative is a frame that wraps to a number below the one before it and a consumer that concludes the stream has gone backwards.