#revocation

Give an autonomous AI agent its own cryptographic identity and a signed mandate from its owner. One call revokes a compromised agent — across every service it touches.

Provision airframes at deploy, isolate onboard subsystems, grant a technician 48 hours of maintenance access from the hangar — and kill a lost drone in one call.

Stations derive connectors fully offline and attest their own sessions. A charging app verifies with the operator's public key only — and a compromised station is contained by its grant.

HR attests employees and contractors without ever holding the corporate root key. Firing someone revokes their access in every service at once — one attestation jti.