Every note that touches access control, newest first.
Persistent agents need access rules that respond to elapsed time, inactivity, account changes, and completed work.