18 lines
510 B
Markdown
18 lines
510 B
Markdown
# ADR 0005: Bearer Resource Secrets
|
|
|
|
## Status
|
|
|
|
Accepted.
|
|
|
|
## Decision
|
|
|
|
Bearer secrets may grant resource-specific capabilities. They do not create
|
|
trusted node identity and should not normally grant trust graph mutation rights.
|
|
|
|
Private resource access is modeled with resource master secret epochs. Revocation
|
|
is approximated by rotating to a new epoch and distributing it only to remaining
|
|
authorized devices.
|
|
|
|
## Consequences
|
|
|
|
Invites and temporary access can be practical without weakening node identity.
|