Irrevocable disclosure

Moving material across a read boundary is a durable, non-revocable event. Deleting the copy removes an artifact and does not undo the reading, which is why the technique that lets a permanent record forget a person does not apply here: erasure operates on a key, and a completed reading leaves no key to destroy. A format that records disclosure therefore types it as permanent and spends its required fields on attribution, naming what moved, from which boundary to which, at which commit, and on whose decision. The question after the fact is never whether it can be recalled, only exactly what went and who decided.