Function judged_at 

fn judged_at(subject: &Subject<'_>) -> OffsetDateTime

The instant subject is being judged at.

Every subject carries one, so this is a clock that works the same in a server and in the browser policy checker, and one an entry can be aged against without reading a clock of this crate’s own.