When the runtime recorded the error, by the runtime's clock. Informational only: stores never compare it, so the SPI rule against caller-supplied time is untouched.