Revocation Registry

Runtime MUST:

• Check revocation during install

• Disable revoked skills automatically

• Support periodic revocation refresh

Revocation sources MAY include:

• Local user revocation

• Domain-signed revocation lists

• Curated registries

Revocation events MUST emit audit entries.