that's what ZedTokens are for: you send a ZedToken with

at_least_as_fresh

and SpiceDB ensures the cache entry used (if any) conforms to that point in time