The first read after the write returns the old state (replica lag / out-of-order event). Verification must re-read rather than raise a false mismatch; one write only.
“Please stop my renewal but let me keep access until it runs out.”
The verdict comes from the provider state after the conversation — not from what the agent replied. All of these must hold:
The sandbox clock then moves to the period end and checks again: