One thing I'm curious about how this is supposed to integrate with the support infrastructure later. As of right now, we aren't planning to allow people to reverify, and it might make more sense to force only one possible verification object per window than to try to take the 'last' one as the truth.