Sets how far a timestamp may run ahead of the last one accepted.
A wider window tolerates a noisier link; a narrower one narrows the chance of a replay landing inside it.
Checks a frame's signature and its place in the timestamp sequence.
Throws when the frame is unsigned, the signature does not match the key, or the timestamp has been seen before.
A signing key and the timestamps it has already accepted.