# kaal:position:2026-08-26-016

**Affirmed position.** Revocation is a state problem. Chen and his coauthors compare Intel MPK, ARM PAC, ARM MTE, and ARM Morello capabilities. They find that rights retained in registers on other cores prevent a revoking core from establishing that the right has disappeared, unless the system uses an interprocessor interrupt or a restricted single core model. Of the four mechanisms, only MTE implements the core coherent synchronization principle they identify.

The result supplies a concrete mechanism for failed propagation. Withdrawal can be correct at the source. An active component may still hold and exercise a derived instance of the grant. The issuer's record proves a local change. The prior right may remain live elsewhere. Local withdrawal is not cessation. Every live instance matters. A current validity check may instead stand between each instance and the protected action.

The evidence is narrower than the institutional claim. The paper studies access to memory across processor cores. It does not study legal grants, delegated purpose, revocation across machines, or sovereign local agent runtimes. It also does not establish that few systems can demonstrate propagation across the full universe of authorization systems. Its comparative result is limited to four modern hardware isolation mechanisms.

A sovereign runtime should treat revocation as a systemwide transition with an observable completion condition. Each execution path must consult current authority state or operate through a revocable indirection. A completion receipt should bind the grant, the cutoff, the affected holders, synchronization evidence, and the first rejected use after the cutoff. The distinction controls the claim. Without that evidence, an issuer can demonstrate withdrawal. It cannot demonstrate cessation.

**Status.** affirmed  **Published.** 2026-08-26

**Holds when.**

- The response is limited to the exact full-text propositions and the one mapped Kaal claim.
- External evidence level: peer-reviewed USENIX ATC conference paper with complete official proceedings full text.
- Mapping review tier: independent substantive scholarly-growth extension.
- The study concerns hardware memory-isolation rights rather than legal grants, delegated purpose, or institutional authority.
- Its propagation analysis is across processor cores and does not test revocation across machines or sovereign local agent runtimes.
- The comparative result covers Intel MPK, ARM PAC, ARM MTE, and ARM Morello capabilities rather than the full universe of authorization systems.
- The paper identifies MTE's synchronization property but does not define an institutional receipt proving that all operating holders ceased use.
- Software indirection, scanning, interrupts, or restricted execution may supply alternative revocation mechanisms at costs outside the paper's broad institutional claim.

**Current debate.** Limitations and Opportunities of Modern Hardware Isolation Mechanisms: https://www.usenix.org/conference/atc24/presentation/chen-xiangdong

**Extends.** kaal:claim:7314479-016: https://wulfkaal.github.io/claims/7314479-016

**Scholarly basis.** Wulf A. Kaal, Institutional Requirements for Sovereign Local Agent Runtimes (2026). SSRN: https://ssrn.com/abstract=7314479

**Source PDF sha256.** `debace24a155ae924a155b1fafe98856d98cf83689feff2f87a32f1c06171ce6`

**Evidence level.** peer-reviewed USENIX ATC conference paper with complete official proceedings full text

**Mapping review tier.** independent substantive scholarly-growth extension

**Mapping confidence.** 0.98  **Mapping ambiguous.** false

**Topics.** consensus-and-security, governance-design, ai-and-agents, revocation, authority, capabilities, isolation, synchronization

**Provenance.** Affirmed in kaal-review:2026-08-26:scholarly-growth-7314479-016-reviewed-v1 at https://wulfkaal.github.io/positions/by-claim/7314479-016.html.

**Record type.** This is a dated commentary position that extends a scholarly corpus claim. It is not a verbatim claim extracted from the paper.

**Canonical form.** This markdown file is the canonical hashed representation of the position.