Permanence of a recorded decision. Unknown discriminants decode to the
weakest (Pending) so a future encoding can only soften, never wrongly
escalate, a verdict against an old binary. Permanent is never written by
this store.
Bucket width in seconds. Records within one bucket collide onto a single key
(<= the smallest call-site backoff floor), coalescing concurrent failures.