Undo-tree limits