team_device_revoke
Revokes an enrolled team device by ULID and records a revocation event so later events from that device are dropped across peers. Use it to invalidate a compromised or retired device.
Instructions
Revoke an enrolled device by its ULID. Appends a deviceRevoked event to the team scope. After revocation, any event authored by this device with a UID greater than the revocation event's UID is dropped on all peers (convergent fold). The revoker must be the device's own principal, or a team admin/owner.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | Optional free-form reason for the revocation (audit trail). | |
| deviceId | Yes | ULID of the device to revoke. Required. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| status | Yes | Always "revoked" on success. | |
| deviceId | Yes | ULID of the revoked device. | |
| eventUid | Yes | UID of the appended deviceRevoked event. | |
| principalUid | Yes | ULID of the device's owning principal. |