As I was writing the surface sync API doc, I remembered that we need to harden the ordering invariants. We don't quite do this correctly in Viz today:

A client should never submit a CompositorFrame to a surface in the past.

In other words, once a client submits a CompositorFrame to surface i, the FrameSink will not accept CompositorFrames to surfaces < i.