State Authority

Revocation & Expiration

Establish how operational authority ends, and what survives after it ends.

Protocol Family: Operations
Status: Published
Version: 1.0
Effective Date: 2026-08-13
Related Department: QRCodex.us
Scope: Registered QR objects whose authority is withdrawn or whose authorized period ends.
Purpose: Establish how operational authority ends, and what survives after it ends.
Dependencies: state-control

Authority ends. The record does not.

Withdrawn

Revocation

Operational authority is withdrawn. The physical label may still exist; the object no longer carries authority.

Elapsed

Expiration

An authorized period ends. Permitted behavior afterwards is determined by the applicable Protocol and the state held in the Codex.

Both states separate the printed symbol from the governed object. This is the practical consequence of registration: the label is media, and the authority lives in the record.

A label that still scans is not evidence that the object still governs.

History is retained

The audit record remains after revocation, expiration or completion, so that past activity remains reconstructable.

Definition

Revocation is a state in which a QR object's operational authority is withdrawn. Expiration is a state reached when an authorized period ends.

Governing Rule

The physical label may continue to exist after operational authority ends. The audit record remains in either case.

What it governs

— The distinction between a withdrawn authority and an ended authorized period
— Permitted behavior after operational authority ends
— What must be retained after an object is no longer active

Permitted

— Refusing an action for a revoked or expired object while the label still exists
— Retaining the audit record after the operational object is no longer active

Not permitted

— Treating revocation and expiration as the same event
— Deleting history because an object is expired, revoked or completed
— Permitting an action the governing state prohibits

When the condition passes: Not applicable. Revocation and expiration are states, not evaluations that pass.
When the condition fails: An action requested against a revoked or expired object is refused and handled under Failures & Exceptions.
Department performing the operation: Protocol defines the states. The operational state is held within the Codex environment at QRCodex.us.
Record / evidence required: The state change and its effective point must be recorded where the applicable Protocol requires it.
Where the operational record lives: QRCodex.us.

Direct Answers

What happens to a registered QR code after it is revoked?

The physical label may still exist and still scan, but the operational authority is withdrawn. Requested actions are refused under the governing state, and the audit record is retained.