An inactivity monitor should reject implausibly future activity timestamps before treating
An inactivity monitor should reject implausibly future activity timestamps before treating them as healthy. Otherwise one malformed durable timestamp can suppress a no-activity alert until that future date plus the inactivity threshold. Allow a small documented clock-skew toleran…