Close every authorised door while preserving the lawful research record
A research data access revocation confirmation should show that a defined authority ended across a defined scope. It should not erase evidence, imply misconduct without basis or destroy outputs that remain lawfully required.
Why this English matters now
A research data access revocation confirmation records the end of a defined user’s authority for a defined project and dataset.
Readers searching revoke data access, remove research user, dataset permissions or research account closure need to know whether access was merely requested, actually disabled and independently verified.
Current TRUST material checked on 28 October 2026 describes authorised member and user roles, approved data requests, institutional agreements, individual undertakings and consequences for breach.
Clear English protects participants, contributors and legitimate research continuity at the same time.
Checked against the official sources on 28 October 2026. The article explains how to read a document and make a safer next decision; it does not replace the issuing institution.
The reading method
Build an access-revocation register with institution, project, approved request, dataset, user, role, account, agreement, undertaking, ethics basis, trigger, effective time, systems, workspaces, tokens, exports, derived outputs, disposition direction, successor, handover, disable actions, verifier, residual exception and retention record.
- Read from participant, data contributor, researcher, institution, platform, security, ethics and successor perspectives.
- Keep expiry, withdrawal, suspension, revocation, disablement, verification and data disposition separate.
- Use an authority-identity-access-data-handover-verification chain.
Read with every responsible person in view
- For researchers, clarify what may be kept, returned or destroyed before access ends.
- For data and security teams, disable every credential and test the result.
- For students and families, see digital permission as a precise and reversible responsibility.
Different people can read the same sentence for different jobs. The student needs the next action; the administrator needs a routable record; the family needs a realistic timeline; the eventual recipient needs evidence that fits its stated purpose. Good English keeps those needs aligned without inventing authority.
Official factual floor
These first-party sources support the factual claims and should be reopened for any live transaction:
Did you know?
TRUST distinguishes institutional authority, individual obligations and approved project access. Its breach language can require immediate cessation of use and return or destruction of analysis or output as directed; that specific remedy should not be copied onto every routine closure.
Full chapter index
- 1. Authenticate the revocation confirmation
- 2. Separate request, approval, suspension and revocation
- 3. Read the governing agreement and undertaking
- 4. Identify the exact trigger
- 5. Define the effective boundary
- 6. Handle downloaded data and outputs
- 7. Read breach consequences precisely
- 8. Reconcile people, roles and groups
- 9. Preserve audit evidence without exposing data
- 10. Plan handover before closure
- 11. Test revocation and residual access
- 12. Build the revocation evidence chain
What this part of the document is doing
Match institution, platform, project, dataset, approved request, named user, role, account, effective date, reason category, issuer and transaction reference. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: A departed colleague’s account closure is filed as revocation for every project user. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. open authorised notice
- 2. match person and role
- 3. match dataset and project
- 4. save confirmation
Put into one sentence, the sequence is to open authorised notice, match person and role, match dataset and project, and save confirmation. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Authentication supports data governance. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
A request can be withdrawn, an active approval can expire, access can be suspended temporarily or authority can be revoked. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: A temporary outage is announced as permanent revocation. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. name state
- 2. identify owner
- 3. identify duration
- 4. record reinstatement route
Put into one sentence, the sequence is to name state, identify owner, identify duration, and record reinstatement route. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: State vocabulary supports digital literacy. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
TRUST describes institutional agreements, individual undertakings and Terms of Use that define obligations for authorised access and use. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: A platform login is treated as the whole authority to use the data. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. open agreement set
- 2. identify user obligations
- 3. identify project purpose
- 4. record continuing duties
Put into one sentence, the sequence is to open agreement set, identify user obligations, identify project purpose, and record continuing duties. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Rule reading supports research. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
Revocation may follow project end, role change, employment departure, expiry, breach, ethics change or a data-contributor decision. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: A role change is labelled misconduct without evidence. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. quote authorised reason
- 2. avoid speculation
- 3. separate administrative and breach routes
- 4. escalate fairly
Put into one sentence, the sequence is to quote authorised reason, avoid speculation, separate administrative and breach routes, and escalate fairly. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Fair language supports professional trust. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
Record the time, systems, datasets, credentials, workspaces, tokens, exports and derived outputs covered. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: The main account is disabled while an API token remains active. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. inventory access paths
- 2. set effective time
- 3. disable dependencies
- 4. test closure
Put into one sentence, the sequence is to inventory access paths, set effective time, disable dependencies, and test closure. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Systems thinking supports cybersecurity. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
The notice should say what may be retained, returned, destroyed, quarantined or submitted for review. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: A user deletes all analysis code even though only source data access ended. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. classify source data
- 2. classify permitted outputs
- 3. follow authorised direction
- 4. record disposition
Put into one sentence, the sequence is to classify source data, classify permitted outputs, follow authorised direction, and record disposition. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Classification supports research continuity. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
TRUST states that a breach can require immediate cessation of use and return or destruction of analysis or output as directed. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: That breach remedy is applied to every routine project closure. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. identify whether breach route applies
- 2. quote direction
- 3. record action
- 4. preserve evidence
Put into one sentence, the sequence is to identify whether breach route applies, quote direction, record action, and preserve evidence. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Scope language supports compliance. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
Remove the user from project groups, shared workspaces, service accounts, mailing lists and delegation records while preserving other authorised users. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: The entire project team loses access because one member leaves. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. map identity
- 2. map memberships
- 3. remove least necessary scope
- 4. verify remaining access
Put into one sentence, the sequence is to map identity, map memberships, remove least necessary scope, and verify remaining access. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Identity language supports teamwork. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
Keep access logs, approval, revocation instruction, confirmation and verification in controlled locations. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: The notice includes screenshots of sensitive records that are not needed to prove closure. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. minimise evidence
- 2. restrict logs
- 3. record timestamp
- 4. retain authorised proof
Put into one sentence, the sequence is to minimise evidence, restrict logs, record timestamp, and retain authorised proof. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Privacy supports governance. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
Transfer legitimate responsibilities, code, documentation and approved outputs to an authorised successor before the effective cut-off where permitted. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: A student’s account is revoked before the team preserves the only data dictionary. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. identify project assets
- 2. name successor
- 3. transfer through authorised route
- 4. confirm custody
Put into one sentence, the sequence is to identify project assets, name successor, transfer through authorised route, and confirm custody. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Communication supports research teams. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
Verify sign-in failure, token invalidation, workspace removal, download restrictions and exception handling. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: A ticket is closed because the disable command was submitted. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. test controls
- 2. check logs
- 3. resolve exceptions
- 4. record verifier
Put into one sentence, the sequence is to test controls, check logs, resolve exceptions, and record verifier. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Verification language supports IT careers. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
What this part of the document is doing
Keep original request, approval, agreements, user undertaking, access inventory, trigger, instruction, system actions, data disposition, verification, handover and retention record. This is where English becomes practical: the noun names the record, the verb names the state, the date fixes the version, and the qualifying phrase limits what the reader may safely conclude. Read those pieces together. If one is missing, mark the gap instead of filling it with hope, habit or a friend’s experience.
The useful question is not merely “What does this word mean?” It is “What action does this sentence authorise, who owns that action, and what evidence would show that the state has changed?” That question turns reading into a decision tool. It also prevents a heading, notification preview or informal summary from replacing the complete operative sentence.
A realistic situation
Example: Only a helpdesk ticket number remains. The risk here is not a lack of intelligence. It is a state-reading error: a nearby fact is allowed to stand in for the exact fact the process needs. A calm reader goes back to the named record, matches the person, programme or transaction, and keeps the decision inside the document’s real scope.
- 1. archive authority
- 2. archive scope
- 3. archive action
- 4. archive verification
Put into one sentence, the sequence is to archive authority, archive scope, archive action, and archive verification. Doing this aloud is helpful because it exposes hidden assumptions. A student, parent or adviser can then compare the spoken summary with the official wording. If the summary sounds stronger than the source, revise the summary—not the source.
Keep a small evidence note beside the action: document title, issuer, issue date, current status, deadline, responsible office and unresolved question. This takes less than a minute and prevents screenshots, tabs and forwarded messages from becoming an unstructured pile. The note also makes a later enquiry more precise and easier for the receiving office to route.
Transfer: Records management supports public trust. The same habit works in school notices, examination instructions, applications and employment records: authenticate, classify, sequence, act, and retain proof. That is why this form of English learning travels well beyond one document.
Evidence examples: what the wording can and cannot prove
Label and operative sentence
Use a heading to locate the data access revocation confirmation, then read the whole sentence that controls the decision.
Check: Navigation words help; complete clauses decide.
Current source and saved evidence
Keep a dated copy, but reopen the official source before a live deadline.
Check: An authentic record can still be out of date.
Requirement and recommendation
Preserve must, should, may, encouraged and recommended.
Check: Modal verbs change responsibility.
Interim and final state
Record an interim state without expanding it into a promise.
Check: Evidence is reliable only within its stated scope.
Practice studio
Access graph
Map accounts, groups, tokens and workspaces.
- identity
- system
- permission
- owner
Output sort
Classify source data, code, analysis and approved exports.
- item
- authority
- action
- evidence
Closure test
Verify every route after disablement.
- sign-in
- token
- workspace
- exception
Advice for students, families and advisers
For researchers and supervisors
- Plan handover before the effective cut-off.
- Do not infer misconduct from an administrative revocation.
For data and security teams
- Revoke the least necessary scope while protecting the project.
- Keep proof without copying sensitive data.
For students and families
- Learn that a closed account is not the same as a closed responsibility.
- Practise naming the exact permission that changed.
Frequently asked questions
Is expiry the same as revocation?
No.
Does disabling one account close every access path?
Not necessarily.
Must every revoked user destroy all outputs?
Follow the applicable agreement and authorised direction.
Can breach remedies differ from routine closure?
Yes.
Should a revocation imply wrongdoing?
Not without evidence.
Can handover occur before closure?
Yes, through an authorised route.
Why test after disablement?
To identify residual credentials and exceptions.
Should logs contain the dataset?
No; keep proportionate evidence.
What should be saved?
Authority, scope, instruction, system actions, disposition and verification.
Why English?
Because expired, revoked, disabled and verified are different states.
Useful next reading
- Restricted Research Data Access Approval — how the permission begins
- Research Data Destruction Certificate — how authorised disposal is evidenced
- How English Works — the canonical English and meaning hub
Closing thought
Good revocation is careful rather than dramatic: it identifies the authority, closes every access route, protects necessary records, hands over legitimate work and proves the result without exposing the data.