//! Bounded admission diagnostics, never evidence that a proof is authentic.
use ;
/// A receiver refusal. Only `NotYetValid` identifies a future-start retry hint;
/// it grants no clock grace, new issuance, deadline extension or authorization.
/// The caller owns bounded retries of the same credential and login generation.