add private mode with iroh · Pull Request #112 · disnetdev.com/radial

Implemented the no-device-revocation private-mode simplification on top of the existing iroh/private-bus implementation.

Removed the unreleased device-revocation lexicons and regenerated record types.
Collapsed gate 2 to published-device authorship plus the existing membership fold; removed provisional admin/device-removal stratification.
Removed revocation, re-signing recovery, and sole-signer APIs from core, sidecar, daemon, and browser code.
Reduced peer authorization to published, addressed devices with a single unknown refusal.
Removed revoke actions from both CLIs and the web UI; rotation remains fold-neutral hygiene.
Added the explicit no-per-device-revocation disclosure and retained permutation, forged-public-grant, contested-key, unpublished-signer, and rotated-history coverage.

Provenance:

Branch: radial/impl-d78d52bbc3f5
Commit: 2b35d09f68fa17fd7d3c7b861bc9b4a64f8c5730
Pull request: Radial/tangled will open it from the pushed branch (no forge-side PR CLI is available to this turn).

Checks:

pnpm codegen passed.
pnpm typecheck passed.
pnpm lint passed.
pnpm build passed.
Core’s full test package passed after the fold changes; the ingest authorization regression found by the workspace run was updated to the no-revocation semantics. The complete workspace test command was not rerun after that final test-only correction.

Remaining risk: historical documentation and skipped obsolete test bodies still contain revocation-era prose and should be pruned in a follow-up before calling the repository grep-clean.

Radial artifact