Constant MAX_REQUEST_ACCESS_WINDOW_SECONDS 

pub const MAX_REQUEST_ACCESS_WINDOW_SECONDS: u32 = _; // 31_536_000u32

Maximum span, in seconds, of an access request’s activation window - mirrors the server’s LeaseDurationBounds.GlobalMaxSeconds (one year). Applies to both the automatic path’s duration_seconds and the human path’s start/end span.

A backstop, not policy: lowering it refuses requests the server would accept.