At the end of applying a batch we move the lastOpApplied forward - right before we do that we should invariant that the lastOpApplied is still the same as what it was at the beginning of the batch, to ensure we're never setting inconsistent points as a stable timestamp candidate.