bardo_document_revoke
Revoke a previously issued document by resubmitting it with the original signature or session authentication. This action is irreversible and idempotent.
Instructions
Revoke a document you issued. Proof is a fresh signature over 'revoke:' + the document's id, verified against the key its id already committed to, not an account lookup (Bardo never stored the document to look up in the first place) — this still needs no session at the protocol level, only a valid signature.
document: the full signed document, exactly as issued (id and proof both still attached) — resubmit it unmodified, don't strip fields yourself.
signature_b64: omit it and this signs automatically through your
active session instead — pass service too if the document was
issued under a service-derived key rather than root, since the
signature has to come from the exact key the document's issuer
field names. Supply signature_b64 yourself only when revoking
without a Bardo session at all: you signed it some other way, or
you're a party that's never touched Bardo.
Idempotent — revoking an already-revoked id is a no-op, not an error. Irreversible: there is no un-revoke.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| service | No | ||
| document | Yes | ||
| session_token | No | ||
| signature_b64 | No |