pub const RECALL_HARD_TIMEOUT: Duration;
Spec §16.2 hard recall dispatch timeout: a slow provider can never delay the turn beyond this bound (the recall path fails open past it).