Lifecycle Semantics
Data Relay Link deliberately separates temporary publication, management identity, and public-port reservation. These are different state machines.Service lifecycle
Client management lifecycle
revoke clientblocks the client’s management identity but does not mean “free all public ports”.release clientis the server-side operation that removes the client record and returns its service reservations.- client uninstall is local-only and does not automatically contact the server to release reservations.
delete client command.
Enrollment credential lifecycle — stable v2.2.1
show enrollments does not expose the secret itself. Stable v2.2.1 supports revoking active enrollment credentials with:
The stable v2.2.1 CLI includes the qualified enrollment lifecycle/retention controls. Mutable
main may contain later changes, so field procedures should follow the immutable v2.2.1 contract.