"""Optional recording-time evidence; original local timestamps remain intact."""
import os

def recording_time():
    if not os.environ.get('WARDEN_CLOCK_TRUST_FILE'):
        return {}
    try:
        from railiance_clock.attribution import from_environment
        result = from_environment('WARDEN_CLOCK_TRUST_FILE')
        # These are time observations, not raw credentials. Keep audit metadata
        # within the existing detector's restrictions without weakening it.
        if result.get('railiance_time', {}).get('status') == 'usable':
            result['railiance_time'].pop('epoch', None)
            result['railiance_time'].pop('sample_id', None)
        return result
    except (ImportError, OSError, ValueError):
        return {'railiance_time': {'status': 'unavailable', 'kind': 'recording_time'}}