The host applies the newest declaration, a file may be created once, the foundation filters first

031: a window of unacknowledged declarations is drained to the newest; the
rest are set aside and reported as superseded. 035: a file resource may say
create-once — written when absent, kept untouched when present (ADR 0087).
054: the bundle installs nftables and loads a base ruleset before the store
and broker, in the table the filter module later replaces (ADR 0088).

internal/link/messages.go

@@ -57,6 +57,14 @@ type Report struct {
 	// Refused is set when the declaration was rejected whole rather than applied in part.
 	Refused string `json:"refused,omitempty"`
 
+	// Superseded names the newer declaration this one was set aside for, unapplied.
+	//
+	// A machine asked to be five successive things becomes the last one (novox/hq issue 031):
+	// when several declarations are waiting, the host applies the newest and acknowledges the
+	// rest without applying them. Each of those is still reported, because silence reads as a
+	// machine that ignored an instruction and "applied" would be a lie — this is the third word.
+	Superseded string `json:"superseded,omitempty"`
+
 	// Carried are the machine's ports held by what this host raised from its own bundle.
 	//
 	// **So the mesh can assign around what it did not put here** (novox/hq ADR 0038). A node