A different approach to proving the timing

relies crucially on the "hidden" nature of the "Time"
constructor; if that were available, times could be "forged"
but we can just refrain from using it directly, I guess.