Glossary
Revocable Link
A revocable link can be individually disabled after it's been created, cutting off the specific access it granted without needing to change anything about the underlying resource or anyone else's access to it. This is a meaningfully stronger design than a link whose only real control point is the decision to create it, since a link once created and shared often persists in places — a forwarded message, a browser history, a cached page — well beyond the sharer's own awareness or control.
Genuine revocability requires the resource to actually check the link's current validity on every use, rather than treating the link itself as a bearer credential that's valid for as long as its bytes are correct — a link that isn't actively re-checked against a current, revocable state is functionally permanent no matter what a 'revoke' button claims to do.