What dispatch recorded: the room and the hash of the worker's per-run token. Never the token itself. A run that is
over keeps the token's hash alone (no room, worker or provider reference), so a report its worker sends after the end
still verifies under the run's own token and is taken without being applied.
What dispatch recorded: the room and the hash of the worker's per-run token. Never the token itself. A run that is over keeps the token's hash alone (no room, worker or provider reference), so a report its worker sends after the end still verifies under the run's own token and is taken without being applied.