§12h. Time

planarian @ a924e09 · Spec v4.6 · snapshot main · all versions

Everything that does not survive a reboot is timed on CLOCK_BOOTTIME, never wall-clock time: approval-token expiry (tokens are not carried across daemon restarts at all, §12 step 4; the checkpoint keeps consumed nonces only), lease deadlines, cooldowns, settle windows, activation windows, and the parking limit (§12f). Wall-clock time is used only for what is shown to people and for records that must be compared across boots. The posture options recommend authenticated time (NTS) and report unauthenticated NTP as a notice. Gym case: the wall clock is moved back 48 h after an approval is issued; the token still expires 24 h after issue.