Expand description
The revocation log: a user-signed, append-only chain of
MerkleNodes naming revoked agents and generation bumps.
Identity is the node’s ContentId; each node is signed by the user named
in the genesis entry, over REVOCATION_DOMAIN || cid_bytes — the same
detached-signature shape as crate::Assertion. The JSON form of a
RevocationLog is a container only: nothing in it is trusted until
RevocationLog::verify recomputes every id and checks every signature.
See docs/decisions/revocation.md.
Structs§
- Revocation
Log - The ordered, signed nodes of one user’s revocation log.
- Revocation
State - What a verified log says: who owns it, where it ends, what is revoked.
- Seen
- The head a consumer last saw and persisted, for rollback/fork detection.
- Signed
Entry - A log node and its detached signature (beside the node, never inside it).
Enums§
- Revocation
Entry - One entry of the log.