Devices hold a token from the user principal anchoring "this device speaks for me". This is the membership edge of the principal model: without it, nothing distinguishes a device the user admitted from a stranger's.
Admission and removal ride ordinary mint and revoke, so removing a device is a revocation, the same cryptographic exclusion kick already uses. A device's other grants are unaffected, matching how room kick and device removal are already separate operations.
Devices hold a token from the user principal anchoring "this device speaks for me". This is the membership edge of the principal model: without it, nothing distinguishes a device the user admitted from a stranger's.
Admission and removal ride ordinary mint and revoke, so removing a device is a revocation, the same cryptographic exclusion kick already uses. A device's other grants are unaffected, matching how room kick and device removal are already separate operations.