Process and evidence integrity
Decision Passport · 5
Revocation list
An issued passport can be revoked by an editor of the issuing workspace, or superseded by a corrected passport. Revocations are public and permanent. A revoked passport still verifies cryptographically; checking revocation is a separate step that verifiers must not skip.
1.Revoked passports
No passport has been revoked.
2.Reasons
| superseded | A corrected passport replaces this one and names it; the successor's hash is listed. |
|---|---|
| withdrawn | The issuing workspace no longer stands behind the record. |
| error | The passport was issued in error (for example, the wrong report was bound). |
| key-compromise | The signing key may have been exposed; the passport is re-issued under a new key. |
3.Checking revocation offline
Download the signed list and pass it to the offline verifier. The list is checked with the pinned keys; an unsigned or altered list can never establish “not revoked”.
curl -o revocations.json https://<this site>/api/passport/revocations decision-verifier --keys production.json --engines engines.json --revocations revocations.json passport.bundle.json
Policy
- An editor of the issuing workspace may revoke an issued passport, giving a reason: superseded, withdrawn, error or key-compromise. Revocation is permanent.
- A correction is a new passport that names the passport it supersedes; the old passport is then revoked with the reason superseded and a pointer to its successor.
- The revocation list is public and signed with the operator key, so it can be checked offline. A verifier that cannot obtain the list must report revocation status as not checked, never as not revoked.
Disclaimer. A passport attests to process and evidence integrity, not legal correctness. It is not legal advice, not a qualified electronic signature or seal, and not a certification; no regulatory approval is claimed.