Even if:

• keys rotate
• policies change
• attributes update

Proofs remain valid only if:

• they were generated with a valid state commitment
• the key is still listed as active
• no revocation flag is set

The Proof Engine automatically checks this via:

CheckNotRevoked(control_key, policies_root)