time, timing attacks
more work on state resource model; had to backtrack a bit to protect causal commutativity