FIRING

Claimed by the owner of its partition, which is sending its slot: a conditional write from the PENDING row as loaded, so a timer cancelled or rescheduled after it was loaded is never sent. Timer.dueAt is then the claim's deadline: a claim left by a node that died is due again once it lapses, and the next owner claims it anew.