Correctness of PaceFilter
The update on a PaceFilter checks if it is valid only after updating the value. Should this not happen beforehand?
As it is now, an update with a smaller value than currently in the buffer would be discarded even though the current value is not valid anymore, as it is only invalidated after the update.