12 October 2026 · 5 min read
Switch it off today: why revocation is the hard part
Giving an agent permission takes one click. Making every office that relies on it stop, the same day you withdraw it, is much harder. Revocation has to reach offices you don't control, survive slow connections, and leave a record of when it took effect. Short lives help. They don't replace it.

