{
  "handle": "ExpiringToken",
  "mechanism": "Access tokens that strictly degrade in capability over time. A fresh key can do everything (Admin). After 1 hour, it degrades to Write-Only. After 2 hours, Read-Only. After 3 hours, Dead. The decay is encoded in the token logic itself. It extends {{bearer_token}} by embedding an immutable expiration timestamp within the signed payload.",
  "gloss": "Time-decaying privileges",
  "failure_modes": [
    "Clock synchronization issues."
  ],
  "invariants": [
    "Expired tokens cannot be revived.",
    "Monotonic {{decay}}: Capabilities cannot increase over time",
    "Time-Bound: Token is invalid if CurrentTime > ExpiryTime"
  ],
  "_meta": {
    "tier": 1,
    "ring": 2,
    "supersedes": [
      "sema:ExpiringToken#mh:SHA-256:4e3cc3cee0de56a4eef0676629811cb4afa3383bc80bde227924d66a6af16f6e",
      "sema:ExpiringToken#mh:SHA-256:a1c3ec3a2dcab7d534072c42b3829b0bb654f8a593c63a71075a38e75bedf72d",
      "sema:ExpiringToken#mh:SHA-256:b0e80819310c7415a0348183bb08bdca243d7193f93e11a5f665f7ce1a9414d3"
    ],
    "path": [
      "Society",
      "Protocols"
    ],
    "related": [
      "Powerreturn#2a84"
    ]
  },
  "sema_id": "sema:ExpiringToken#mh:SHA-256:6ccee8101ea0c081947b221568ce55d3b727412df9015a4ac8e876dc956efcaf",
  "sema_ref": "ExpiringToken#6cce",
  "sema_stub": "6cce",
  "dependencies": {
    "references": {
      "bearer_token": "sema:BearerToken#mh:SHA-256:190a706b87eb5e59dea9d23a06f8f13f45081dec847572be38dfb398cf201112",
      "decay": "sema:Decay#mh:SHA-256:482b97f7196f35c8c50be1b2537ec6e04410a4920fcd8409bec735db3278737a"
    }
  },
  "sema_layer": "Society",
  "sema_category": "Protocols",
  "used_by": {
    "references": {
      "Powerreturn": "sema:Powerreturn#mh:SHA-256:2a84d48f13458d5fb68fa39838396186b9168c3d665cbed920f77eb120a2b26e"
    }
  }
}