Function u64_from_u128_saturating 

pub fn u64_from_u128_saturating(val: u128) -> u64

Converts a u128 to u64, saturating at u64::MAX.

Suits whole-unit Duration reads such as as_millis(), where clamping an out-of-range value beats failing on it.