What must remain zero
active tokens, sessions, keys, role bindings, successful access attempts
Units measured
credential, address, carrier, truth_record, descendant
Receipts required
revoke log, token inventory, session inventory, key lifecycle, access attempts
Client gain
Detect residual access and refuse fake clean when session inventory is missing.
Delivered pack
Credential Death Certificate: verdict, Unit Ledger, Consequence Graph, Proof Sufficiency, Evidence Pack and Decision Room.
Boundary flow
NO
REVOKED / DENIED / DISABLED|
stop-lineunit
credentialZIP
Credential Death CertificateACTION
STOP / RETUNE / ENFORCE / SCALE