Resolve now checks the owner's state for a personal key; the authenticator treats an inactive owner as a revoked key. Suspension stops the keys within the cache TTL, reinstatement brings them back. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>