You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: papers/bcr-2026-004-anchor-predicates.md
+10-12Lines changed: 10 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -66,7 +66,7 @@ In all cases, the value comes from the log's **append-only, publicly auditable n
66
66
67
67
**Audit Trails**: Anchoring creates tamper-evident records of assertions for compliance, legal discovery, or forensic analysis.
68
68
69
-
**Revocation Detection**: When combined with `supersedes` (BCR-2026-005), anchoring enables detection of attempts to silently replace assertions — the original anchor remains in the log even after supersession.
69
+
**Revocation Detection**: Anchoring enables detection of attempts to silently replace assertions — the original anchor remains in the log even after revocation or update.
70
70
71
71
### Terminology Distinction
72
72
@@ -285,19 +285,18 @@ All proposed codepoints are in the **Core Registry** range (0-99).
285
285
]
286
286
```
287
287
288
-
### Anchor with Supersession
288
+
### Anchor Updates
289
289
290
-
Using `supersedes` from BCR-2026-005 (General Assertions) to indicate an assertion has been replaced:
290
+
When an assertion is revoked or updated, a new anchor entry is created:
291
291
292
292
```
293
-
Digest(supersession-anchor) [
294
-
'anchors': Digest(superseding-assertion)
295
-
'supersedes': Digest(original-anchor)
296
-
'anchoredBy': XID(log-operator)
297
-
]
293
+
Digest(update-anchor) [
294
+
'anchors': Digest(updated-assertion)
295
+
'anchoredBy': XID(log-operator)
296
+
]
298
297
```
299
298
300
-
> **Important**: This creates a **new** anchor entry in the log. The original anchor remains permanently in the append-only log — it is not modified or deleted. The `supersedes` predicate creates a forward reference, allowing verifiers to discover that a newer version exists. This is how Certificate Transparency handles certificate revocation: the original certificate's log entry persists, but a newer entry supersedes it.
299
+
> **Important**: This creates a **new** anchor entry in the log. The original anchor remains permanently in the append-only log — it is not modified or deleted. This is how Certificate Transparency handles certificate revocation: the original certificate's log entry persists, but a newer entry indicates the update.
301
300
302
301
## Relationship to Other Predicates
303
302
@@ -313,8 +312,7 @@ Using `supersedes` from BCR-2026-005 (General Assertions) to indicate an asserti
313
312
314
313
| Predicate | Usage with Anchors |
315
314
|-----------|-------------------|
316
-
|`supersedes`| Anchor revocation/updates |
317
-
|`revocationReason`| Why an anchor was superseded |
315
+
|`revocationReason`| Why an anchor was revoked |
318
316
319
317
## Security Considerations
320
318
@@ -383,7 +381,7 @@ We invite feedback on how these specifications should interoperate. See also the
383
381
384
382
## Related BCRs
385
383
386
-
-**BCR-2026-005: General Assertion Predicates** — `supersedes` for anchor updates
384
+
-**BCR-2026-005: General Assertion Predicates** — `revocationReason` for anchor revocations
387
385
-**BCR-2026-007: Principal Authority Predicates** — Authority relationships
0 commit comments