[aruintelligence]

Summary

• Extend witness replay chronology to the evidence and optional receipt generated_at claims. Reject malformed UTC millisecond values, a receipt dated after its evidence, and evidence dated after the attestation that signs its hash.
• Enforce the same timeline when producing bundles and in the project-authored Python verifier. Sparse receipts that omit generated_at remain accepted by the existing prototype path.
• Keep timeline checks as consistency checks of supplied data, not proof that the clock or creation claims are truthful.

Local verification

• 897 tests passed.
• 68 signed-quorum JavaScript/Python comparison cases and 28 additional checks passed. Four new fully hashed and signed impossible evidence timelines were rejected by both runtimes after signature verification.
• Installed-package consumer compatibility, proof, API stability, upgrade contract, CLI contract, package artifact, links, proof surfaces, verifier surfaces, and git diff --check passed.

These are project-controlled local results. GitHub CI is pending. No independent certification or trusted timestamp is claimed.