Conservative volatile policy accounting; never filesystem authority or free space. At most 128 oldest hourly terminal buckets survive. Discarding contributions only reduces known expiry and thus increases the candidate upper bound.