Module revocation 

Producer key-revocation signal (ACDP 0.3, RFC-ACDP-0014).

A revocation is not a new wire object: it is an ordinary signed, permanent, content-addressed Body of type key-revocation (interim pre-0.3.0 form: acdp:key-revocation) whose metadata declares a key compromised as of a stated time. This module is the typed view over that metadata: KeyRevocation::from_body enforces the §4 shape rules and derives the §5/§6 trust class, and effective_boundary applies the §4 earliest-compromised_since rule across a set of revocations.

Parsing a revocation does NOT verify it. A verified revocation additionally requires the strict RFC-ACDP-0001 §5.11 body pipeline plus the §5 not-self-signed check (KeyRevocation::check_not_self_signed) against the resolved signing key’s fingerprint — acdp-client wires the full pipeline.

Structs

KeyRevocation

Typed, shape-validated view of a key-revocation context body (RFC-ACDP-0014 §4).

RevocationRefusal

The attributed refusal carried by AcdpError::KeyRevoked: a verified, in-scope revocation made the context’s signing key not authorized.

SourcedRevocation

A verified revocation, attributed (RFC-ACDP-0014 §7 “Attribution”, 0.5.0): which context it is, who signed it, its trust class, which producer’s key it names, and where the consumer got it.

Enums

RevocationEffect

Which RFC-ACDP-0014 §7 step a revocation verdict came from.

RevocationSource

Where a consumer obtained a revocation it acted on.

RevocationTrustClass

The two trust classes of RFC-ACDP-0014 §5–§6. They carry different authority and MUST be reported distinguishably — never collapsed (§6).

UnknownReason

Why a revocation-discovery outcome is unknown (RFC-ACDP-0014 §8, 0.5.0). unknown is never folded into not-revoked.

Constants

MAX_REASON_CHARS

Maximum length of metadata.reason (RFC-ACDP-0014 §4).

Functions

effective_boundary

The effective compromise boundary for key_fingerprint across a set of (verified) revocations: the earliest compromised_since among those that name the fingerprint, or None when none does.