Revocation Policy

ECZ-ID revocation policies define how identifiers and passports are suspended, expired, or invalidated. All revocation events are resolver-first and deterministically checkable.

ECZ-ID Revocation

• Revocation occurs via resolver submission by the original issuer or a higher-authority node.
• Revocation may be temporary (suspension) or permanent (expiration or termination).
• All ECZ-ID resolution must reflect revocation status with effective timestamp.

Passport Revocation

• Passports may be revoked independently of the ECZ-ID that issued them.
• Revoked passports become non-resolvable or flagged with expired state.
• Downstream integrations must verify passport state at time of usage, not issuance.
• ECZ-ID does not guarantee active status unless resolution confirms it. Non-revocation is never implied.

For resolver behavior of revoked passports, see the Passport Specification.

Revocation state is canonical only when returned by the resolver. All downstream caches or databases are non-authoritative.