A simple tool that finds the time gap between revoking access and that access actually ending.
This weekend, I built TimeTrap.
It started with a simple question:
What if access is revoked, but something that depends on it stays active?
That small delay can become a real security problem.
The problem
The access you revoked in your last review is probably still live. I know how that sounds, but it is...
A healthtech signup flow can pass its captcha and still leave a dangerous gap: an account is banned...
A real incident from the finance app I build solo. The security design was textbook. That's exactly...
A revocation propagation model with epochs, leases, failure injection, and convergence invariants.
Retries keep distributed systems moving through timeouts and temporary failures. In an access system,...
Define monotonic epochs, deletion tombstones, acknowledgements, and failure-injection properties for connected-data revocation.
