> We may have to implement some type of heartbeat where the owner of said domain has to respond within a certain amount of time.

A domain squatter is in an easier position to automate that than an amateur to not forget to respond.