Operator training

Lab: Revocation and Fail Closed

Revoke the actor before dispatch, restart, and deny a broken request.

Explanation

What you are learning

Recommended first: Product training. You can still study this lesson.

Revoke the actor before Rain runs. The unused nonce does not execute. Restart keeps that revocation and that consumption state. An empty request id after restart is DENY, reason malformed. Nothing on either row executes. Revocation wins, and malformed input fails closed. A broken request is not an invitation for the workstation to guess the missing field.

Worked example

Teaching workstation

These fields were returned by the teaching workstation for this lesson. They are not a production permit.

A revoked actor cannot dispatch

Revoke operator and present the nonce

outcome
DENY
dispatch
false
executed
false
reason
permit_invalidated
effect
lab.observe
actor id
operator
resource
scope-a
request id
close-1

A broken request fails closed

After restart, submit an empty request id

outcome
DENY
dispatch
false
executed
false
reason
malformed
effect
lab.observe
actor id
operator
resource
scope-a
Exercise

Try it before you check

Both rows should show executed false. If you expected a helpful default, that expectation is the miss.

What is the result of the revoked nonce?
Assessment

Explain the result

What does the empty request id return?

This lesson is not complete yet.

Materials

Use these with the lesson

A passed check is saved in this browser so you can resume. It is not a certificate, not an accreditation, and not authority to run an effect.