Both liveness marks are max-wins, so a relay with a clock running ahead would pin the position into the future: lag reporting would be silenced and the replay cursor would look eternally fresh until the bogus stamp caught up. Require an event stamp to be no later than its receive time before observing it; a later, correctly dated event then moves on normally.