Function parse_at 

pub fn parse_at(bytes: &[u8], clock: u64) -> Result<Envelope, Refusal>

parse against an explicit clock, so staleness is a tested property rather than a property of the test machine’s clock.