Revoke

Capability Gateway

Demo · green

Cut off a bad agent; its next action fails closed.

Revocation that binds to proof. Cut off a compromised agent and its next action fails closed — and every past action under the revoked grant re-derives RED offline, with the issuer absent.

Verify a record →Talk to us
refund-incident-1947.lnrlive
record
refund-incident-1947
root
sha256:54bc0655abbf…
planes
approval code conformance data knowledge policy run  (7)
signer
ed25519 · keyid d2f381d7b0b5…
  • runstep 9 — refunded an already-delivered orderproven
  • knowledgeretrieved doc-1 — a stale refund-policy docproven
  • policyrefund-limit rule evaluated → allowproven
  • data→causesuspected-cause (uncounted)asserted · uncounted
VERIFIEDoffline · engine absentnet requests: 0

Verified offline. 3 proven planes, 1 asserted and uncounted. 0 network requests.

Every product emits Kernel-shape receipts; one verifier checks them all.

The rest of the platform

Same receipt. Same verifier.

All products→