# Revocation trace — local — 2026-10-19T02:50:52.919Z

Chain `mintid-anchor-local`, issuer `ed78c3a1d4037ce9…`, verifier `caee7bdd751dca92…`. Raw events: `revocation-trace-local-20261019T025052Z.jsonl`. Decision log: verifier volume /var/lib/verifier/decisions.jsonl (docker exec mintid-anchor-verifier-1).

## Authority evidence

| Field | Value |
|---|---|
| Source | the issuer's status root on chain `mintid-anchor-local`, read by the verifier with an ics23 proof against the node's committed app hash at each decision (R15) |
| Revision | verifier `ba16a283589f` (public-v2026-10-17.1), issuer `ba16a283589f` (public-v2026-10-17.1); verifier engine `proof-core 0.5.0`, SDK 0.5.0, SPEC-1 v3.2 |
| Issuer signing key | `c626bf6e395e4fea…` (a key id, not a revision) |
| Status/root | before: epoch 1, finalized height 54; after: epoch 2, finalized height 68 |
| Observation time | before 2026-10-19T02:50:52.000Z; after 2026-10-19T02:51:55.000Z (verifier `/v1/status`) |
| Actual age | before 14 s; after 47 s |
| Deployed freshness limit | 180 s maximum root age (heartbeat 30 s; verifier height lag 100 blocks; K = 5 s) |
| Check performed | condition 5: the proof is verified against the issuer definition (BBS key + accumulator) the newest *provable* finalized root anchors; condition 7: the presented root is the current root, or a ring entry inside its validity window, superseded within the height lag and followed by no emergency root; chain unreadable → refuse |

Presentation lifetime: 10 s (R14) — bounds replay, not revocation; a separate field from the revocation latency below.

Claim policy (every challenge; SHA-256 with the issuer policy `d944e588acee02d12bd5a5c35fe2d1b6a01c870fc2b7b5ab5837a45668b8d6bf`): `human_backed = True`, `pairwise_pseudonym` (this verifier), `assurance_grade >= A2`, `counterparty_includes = eip155:8453:0x833589fcd6edb6e08f4c7c32d4f71b54bda02913`, `delegated_scope_includes = payments.initiate`, `category_in = mcc:5812`, `geo_in = iso3166-1:ES`, `transaction_limit >= 5000000 USDC`, `unexpired = True`, `credential_active = True`; no key-custody floor: the trace measures revocation propagation, not custody, and an agent minted without key-attestation evidence is appraised `software`.

## Temporal revocation

| Path | Trigger time (t0) | Authority evidence consulted at the denial | Last accepted action | Required deny point (bound) | First observed denial | Root carrying the revocation |
|---|---|---|---|---|---|---|

## Measured deny point per path

| Path | First observed denial − t0 | Bound | Within the bound |
|---|---|---|---|

Times are wall-clock UTC of this machine; a root's "finalized at" is the CometBFT block time (BFT time), which trails wall-clock by up to about one block, so it can read earlier than the root's own `generated_at`. Each forced attempt takes about a second (proof + verdict), which is the granularity of the measured points.

## Decision-log lines (R18 fixed-slot records)

| Path | Decision | Verifier answer | Decision-log line |
|---|---|---|---|

## Authority unreachable (R15, fail closed)

The node was paused at 2026-10-19T02:51:13.764Z and resumed at 2026-10-19T02:51:53.879Z (40.1 s); the verifier could not prove chain state in between.

| When | What | Answer | Decision-log line |
|---|---|---|---|
| 2026-10-19T02:51:23.806Z (+10.0 s) | presentation made before the cut, decided during it | `state_unproven` (accepted=False) | `accepted=False reason=state_unproven condition=1 decided_at_unix=1792378273 root_epoch=None root_height=None root_age_seconds=None` |
| 2026-10-19T02:51:33.818Z (+20.1 s) | new challenge asked (10.0 s) | HTTP 503 `state_unavailable` | — |
| 2026-10-19T02:51:43.829Z (+30.1 s) | new challenge asked (10.0 s) | HTTP 503 `state_unavailable` | — |
| 2026-10-19T02:51:53.844Z (+40.1 s) | new challenge asked (10.0 s) | HTTP 503 `state_unavailable` | — |
| 2026-10-19T02:51:55.048Z (+1.2 s after the resume) | the agent presents again | `accepted` | `accepted=True reason=accepted condition=9 decided_at_unix=1792378314 root_epoch=2 root_height=68 root_age_seconds=46` |

## Rule

No revocation path was traced in this run.