Constant DEFAULT_MAX_OFFLINE_GRACE_MS

pub const DEFAULT_MAX_OFFLINE_GRACE_MS: u64 = _; // 604_800_000u64

Default maximum offline grace. Cached entitlements older than this read inactive until a refresh succeeds. Fail-closed: an unbounded window would honor refunded/revoked access forever offline (finding: offline cache extends access past refund/expiry). Override per reader with EntitlementReader::with_max_offline_grace_ms.