skarbiec grant revoke

Invocation#

skarbiec grant revoke <consumer>

Purpose#

Withdraw a consumer declaration, direct or workload-bound.

Required inputs and options#

• Requires one consumer name.

Output and state effects#

• Deletes the grant, saves the vault, appends the journal record, and prints ok plus consumer. Repeating it remains a successful absent result.

Refusals#

• Fails if the vault grant section cannot be opened or saved; it never reveals the revoked bearer or workload key.