M9-T08 Implement explicit revoke and safe reuse rules #85
Description
Goal
Add revoke behavior without weakening the late-not-early reuse guarantee.
Context
- Planned task: M9-T08 in docs/work-breakdown.md
- Lease design is frozen in docs/lease-kernel-design.md
- Blocked by M9-T07
Acceptance Criteria
- Revoke transitions are logged and replayable.
- Duplicate revoke requests are deterministic.
- Revoked ownership cannot be reused early under crash, retry, or failover.
Test Evidence
- ./scripts/preflight.sh
Non-Goals
- no persistence or replication work yet