Licence expiries live in a spreadsheet someone forgot to check. You find out a guard was unlicensed after the client does.
Orion checks every licence daily. The moment a certification lapses, that guard is locked out of the roster — before deployment.