access-control.role-revoked.retracted
A role revocation was retracted because a reorg invalidated the source log.
Delivery contract
| Field | Value |
|---|---|
| Event type | access-control.role-revoked.retracted |
| Version | 2 |
| Lifecycle state | retracted |
| Counter-signed receipts | No event-specific advice |
| SDK type | Webhook.AccessControlRoleRevokedRetractedV2 |
The receipt recommendation does not change delivery behavior. DALP waits for a counter-signed receipt only if the webhook endpoint's counterSignedReceipts value is true when DALP queues the delivery. When the value is false, a normal 2xx response completes the delivery.
Related references:
None.
Handle the retraction
Verify the delivery before processing it. Use supersedes to find the earlier event. Mark that event as retracted, then reconcile or reverse the downstream changes it created. Deduplicate by evt_id so retries do not repeat this work.
If the retraction arrives first, retain it and prevent the earlier event from taking effect if it arrives later. Keep both events in your audit record. A retraction does not request a new ledger transaction.
See webhook idempotency and on-chain outcome for retry, replay, and lifecycle handling.
Payload schema
The schema and examples describe the full payload. Thin delivery omits personal data fields. Use the payload-shape guidance to choose the endpoint configuration.
{
"type": "object",
"properties": {
"accessManagerAddress": {
"type": "string",
"minLength": 42,
"maxLength": 42,
"pattern": "^0x[a-fA-F0-9]{40}$",
"description": "A valid Ethereum address (42 characters, starting with 0x)",
"examples": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
},
"accountAddress": {
"type": "string",
"minLength": 42,
"maxLength": 42,
"pattern": "^0x[a-fA-F0-9]{40}$",
"description": "A valid Ethereum address (42 characters, starting with 0x)",
"examples": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
},
"actorAddress": {
"type": "string",
"minLength": 42,
"maxLength": 42,
"pattern": "^0x[a-fA-F0-9]{40}$",
"description": "A valid Ethereum address (42 characters, starting with 0x)",
"examples": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
},
"adminRoleId": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"adminRoleFieldName": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"blockNumber": {
"type": "string"
},
"chainId": {
"type": "integer",
"exclusiveMinimum": 0
},
"roleId": {
"type": "string"
},
"roleFieldName": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
]
},
"systemAddress": {
"type": "string",
"minLength": 42,
"maxLength": 42,
"pattern": "^0x[a-fA-F0-9]{40}$",
"description": "A valid Ethereum address (42 characters, starting with 0x)",
"examples": ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
},
"transactionHash": {
"type": "string",
"pattern": "^0x[a-fA-F0-9]{64}$"
},
"supersedes": {
"type": "string",
"pattern": "^evt_[a-zA-Z0-9]+$"
},
"reorgBlockNumber": {
"type": "integer",
"minimum": 0
}
},
"required": [
"accessManagerAddress",
"adminRoleId",
"adminRoleFieldName",
"blockNumber",
"chainId",
"roleId",
"roleFieldName",
"systemAddress",
"transactionHash",
"supersedes",
"reorgBlockNumber"
],
"additionalProperties": true
}TypeScript SDK example
Use the request's raw body and headers with your endpoint's webhook secret. This handler illustrates verification and event selection. Before writing downstream state, deduplicate deliveries by evt_id and recognize replayed outcomes by their domain identifiers.
const result = await verifyWebhook({
rawBody,
headers,
secret: process.env.DALP_WEBHOOK_SECRET!,
});
if (!result.ok) {
throw new Error(`Webhook verification failed: ${result.code}`);
}
if (result.event.type === "access-control.role-revoked.retracted") {
const event: Webhook.Event<"access-control.role-revoked.retracted"> = result.event;
console.log(event.payload);
}HTTP delivery example
This illustrative request shows the delivery shape. Its timestamp and signature are placeholders; a verifier rejects them. Use a signed platform delivery to verify your endpoint.
curl -X POST https://consumer.example.com/dalp/webhooks \
-H "content-type: application/json" \
-H "webhook-id: evt_fa7ec3dd7c4e019033cf9a524f647c27" \
-H "webhook-timestamp: 1778112000" \
-H "webhook-signature: v1,docs-example-signature" \
--data '{"evt_id":"evt_fa7ec3dd7c4e019033cf9a524f647c27","source_id":"example:access-control.role-revoked.retracted@2:0","lifecycle_state":"retracted","supersedes":"evt_rolerevoked001","payload":{"accessManagerAddress":"0x1111111111111111111111111111111111111111","accountAddress":"0x2222222222222222222222222222222222222222","actorAddress":"0x3333333333333333333333333333333333333333","adminRoleId":"0x0000000000000000000000000000000000000000000000000000000000000000","adminRoleFieldName":"admin","blockNumber":"18445201","chainId":537001,"roleId":"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa","roleFieldName":null,"systemAddress":"0x4444444444444444444444444444444444444444","transactionHash":"0xbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb","supersedes":"evt_rolerevoked001","reorgBlockNumber":18445201},"related":{},"type":"access-control.role-revoked.retracted","version":2,"request":{"idempotency_key":"idem_01JZP7R5W8M9N0P1Q2R3S4T5"}}'Version and manifest
This page documents version 2 of access-control.role-revoked.retracted. This event type is not deprecated. The DALP events manifest contains the machine-readable AsyncAPI entry.
access-control.role-revoked.provisional
A role was revoked on the access-control manager; the revocation is provisional until the indexer reaches the configured reorg depth.
asset.burn.final
Token units were burned from a holder, sent once the chain finality watermark reaches the source block. `transferSourceId` names the token.transfer.final event for the same movement, so a ledger books the burn once.