Every note that touches revocation, newest first.
Persistent agents need access rules that respond to elapsed time, inactivity, account changes, and completed work.
