What guarantees are there regarding config update timing? For example, if a process requires a policy change to get access to a required service, is the server guaranteed to get the config update before the service request?

When we bring in a filesystem, e.g. ram_fs, how does that affect things? It seems that the chain of asynchronous notifications would destroy timing guarantees.