tascan_revoke_device
Revoke a device credential immediately — the kill switch for a lost, stolen, or decommissioned device (RFID portal, barcode gun, PLC, camera, robot, tool, sensor). Its next evidence post is refused. Idempotent: revoking an already-revoked device reports already_revoked and mints no second receipt. Requires the device:admin permission (owner-only, needs full, never reachable through OAuth).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | Why this device is being revoked (up to 500 characters) | |
| device_id | Yes | Device ID to revoke |