ESCALATION_BATCH_FILLED_AT_KEY: "batch_filled_at" = 'batch_filled_at'

Envelope key: per-item fill timestamps (Record<itemKey, iso8601>), stamped by the DATABASE clock inside the same guarded fill statement — row truth, not caller clocks. The attempt timeline for free.