akb_revoke
Revoke a user's access to a vault. Omit source_key to remove all access bases, or specify one to withdraw only that basis.
Instructions
Revoke a user's vault access. You must be owner or admin. Omit source_key and the person is out of the vault entirely; name one and only that basis is withdrawn, which may downgrade rather than remove.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| user | Yes | Target username | |
| vault | Yes | Vault name | |
| revision | No | Monotonic per (vault, user, source); a stale one is a no-op. | |
| source_key | No | Withdraw only this basis. Omit it and EVERY basis goes — an administrator's revoke, which must not leave the person holding rule-given access. | |
| _vault_skill_ack | No | Opaque acknowledgement returned as vault_skill.ack_token. After applying that guide, retry the unchanged operation with this value. The bundled proxy supplies it automatically. |