i think that it's possible that our in-memory file event makes this easier than it would be without an accurate "last seen snapshot" view.