Raise an exception if we've waited too long (violated causality)

Should ultimately replay the prefix, as we say in the paper.