510 B
510 B
ADR 0005: Bearer Resource Secrets
Status
Accepted.
Decision
Bearer secrets may grant resource-specific capabilities. They do not create trusted node identity and should not normally grant trust graph mutation rights.
Private resource access is modeled with resource master secret epochs. Revocation is approximated by rotating to a new epoch and distributing it only to remaining authorized devices.
Consequences
Invites and temporary access can be practical without weakening node identity.