Tentacle support enhancements.

internal/tentacle/remote.go

@@ -119,6 +119,16 @@ func (session *Session) RevokeRemote() {
 	session.revoke_remote_locked("local", true)
 }
 
+// RevokeRemoteEpoch retires only the action/lease owned by a completed core
+// interaction. Closing an old workflow cannot revoke a replacement approval.
+func (session *Session) RevokeRemoteEpoch(epoch uint64) {
+	session.mutex.Lock()
+	defer session.mutex.Unlock()
+	if session.remote != nil && session.remote.epoch == epoch {
+		session.revoke_remote_locked("local", true)
+	}
+}
+
 // RemoteContext is for future reader owners to check again at delivery. A live
 // context is necessary, not sufficient: focus, lock and output policy still apply.
 func (session *Session) RemoteContext(lease tentaclewire.RemoteLease, grant string) (context.Context, error) {