Auto-revoke (optional)

Bissap Cloud can (optionally) revoke a key after it hits a threshold of severe violations.

Default is OFF.

See:

• Concepts: Violations & auto-revoke

What counts as severe (and therefore towards auto-revoke):

• Violations with severity: "severe", or kind in FORBIDDEN_SCOPE, INTENT_VALIDATION_ERROR, RATE_LIMITED, POLICY_BLOCKED.
• Counted in a rolling window (24h by default); when the threshold is reached the key is revoked immediately and logged.