# ADR 0005: Bearer Resource Secrets

## Status

Accepted.

## Decision

Bearer secrets may grant resource-specific capabilities. They do not create
trusted node identity and should not normally grant trust graph mutation rights.

Private resource access is modeled with resource master secret epochs. Revocation
is approximated by rotating to a new epoch and distributing it only to remaining
authorized devices.

## Consequences

Invites and temporary access can be practical without weakening node identity.