Data freshness

Read-only freshness cards: Fresh, Stale, Unknown. Fail-closed when unbound. Unbound ≠ fresh. Not live masterengine.ai. Not kernel source of truth.

Inspectable provenance · Governed Agent Context Action (specimen)

last-synced timestamps here are inspectable provenance — specimen only for a future Governed Agent Context Action (approved schema slice + query/run evidence).
No real warehouse agent. No PDF agent. No Fabric client. No OpenAI client. Offline mock JSON only.
Fresh may show only from mock fixture last-synced claims on a bound source — never a live DB handshake.
Stale and Unknown are honest non-fresh states — never greenwashed as fresh.
Unbound is fail-closed: not fresh, no pretend-fresh, no invented last-synced. Unbound ≠ fresh.
Env / DSN names only (see env.example). Secret values never ship in this pack.

Fresh —

Stale —

Unknown —

Unbound (fail-closed) —

Source rows (provenance specimen)

Awaiting local fixture…