Function verify_poll_lease_until 

pub fn verify_poll_lease_until(
    now: DateTime<Utc>,
    submitted_at: Option<DateTime<Utc>>,
    calls: TimeDelta,
) -> DateTime<Utc>

How long a verify poll pushes the row out of reach while its request is out, so a concurrent iteration cannot poll it twice. The poll’s own outcome overwrites this. calls is the longest the iteration’s registry calls may take together: the poll and the recovery lookup after it.