revocation:
  type: capability
  capability_id: "<capability_id>"
  reason: "<reason>"
  effective_immediately: true
  propagate_to:
    - all_nodes

revocation:
  type: signing_key
  key_id: "<key_id>"
  rotation_required: true
  notify_runtime: true
  refresh_interval_seconds: 300

revocation:
  type: signed_skill
  skill_id: "<skill_id>"
  signature_required: true
  crl_refresh: enabled
  crl_url: "<revocation_list_endpoint>"