Revoke a grant
Freeze a capability you previously authorized. Connect the wallet that owns the grant, pick an active one, and sign a revocation with your own key. A revocation is owner-signed policy, not a secret, so it is safe to author here. It is anchored on the grant topic and honored on every release that follows, so the agent can no longer act under it. Revoke is free.
What revoke does, and does not, do
Revoking stops future releases under the grant; it does not undo releases that already happened (those stay anchored in the audit trail). The credential itself is unaffected and remains in its vault. To authorize again later, publish a new grant in the builder. Only the grant owner can revoke; the backend verifies your signature against the grant's owner identity.