An AI agent’s biometric approval needs an expiration clock Biometric Update