docs: replace NFT references with XLS-70 credentials

Grant liveness uses XLS-70 CredentialCreate/Delete, not NFTokenMint/Burn.
Policy anchoring uses Hedera HCS only (xrpl-nft rail removed).

Updated: l1-ecosystem-evaluation, service-api, sdk, stablecoin-profile,
verifier, intent-anchoring, dispute-verification, animation pack, README

Made-with: Cursor

Author: NAOR YUVAL

README.md

@@ -118,7 +118,7 @@ Import from `mpcp-service/sdk`.
 ```
 mpcp-reference
  ├── src
- │   ├── anchor/          # On-chain adapters: did:xrpl, HCS, XRPL NFT revocation
+ │   ├── anchor/          # On-chain adapters: did:xrpl, HCS; grant liveness via XLS-70 credentials
  │   ├── hash/            # Canonical JSON serialization and SHA-256 hashing
  │   ├── policy-core/     # Policy evaluation engine and types
  │   ├── protocol/        # Artifact types, schemas, SBA/PolicyGrant signing, Trust Bundles

docs/animation/MPCP_ANIMATION_PACK.md

@@ -65,7 +65,7 @@ Narration:
 
 ## Scene 5 — Policy Anchoring
 Visual:
-Policy document hash flowing into a public ledger (Hedera HCS or XRPL NFT).
+Policy document hash flowing into a public ledger (Hedera HCS).
 
 Narration:
 "An optional anchorRef on the PolicyGrant links it to a public ledger record — providing tamper-evident policy history for audit and dispute resolution."
@@ -113,7 +113,7 @@ Autonomous parking example
 Vehicle enters → policy → budget → Trust Gateway → XRPL settlement
 
 Scene 5
-Policy document anchored to ledger (Hedera HCS / XRPL NFT)
+Policy document anchored to ledger (Hedera HCS)
 
 Scene 6
 Verification replay animation

docs/implementation/dispute-verification.md

@@ -18,7 +18,7 @@ const result = verifyDisputedSettlement({
   context: settlementVerificationContext,
   // Optional: ledger anchor result from policy document anchoring
   ledgerAnchor: {
-    anchorRef: grant.anchorRef,  // "hcs:0.0.12345:42" or "xrpl:nft:ABC123..."
+    anchorRef: grant.anchorRef,  // "hcs:0.0.12345:42"
     rail: "hedera-hcs",
     sequenceNumber: "42",
     topicId: "0.0.12345",

docs/implementation/intent-anchoring.md

@@ -2,7 +2,11 @@
 
 Optional support for publishing MPCP policy documents to distributed ledgers. Provides public auditability, dispute protection, and tamper-evident policy history.
 
-**Hedera HCS** adapter is implemented (publish policy document to a topic). **XRPL NFT** adapter is implemented (mint an NFT representing the policy document). Both return an `anchorRef` that is stored on the PolicyGrant.
+**Hedera HCS** adapter is implemented (publish policy document to a topic). It returns an `anchorRef` that is stored on the PolicyGrant for **policy document** auditability and dispute resolution.
+
+> **Grant liveness** (revoking or invalidating a grant) is a **separate** mechanism: XRPL **XLS-70** credentials (`CredentialCreate` / `CredentialDelete`), not policy `anchorRef` on HCS.
+
+> **Historical note:** An earlier **XRPL NFT** policy-anchor path (`xrpl:nft:{tokenId}`) existed in reference discussions; it is **removed / superseded** for anchoring. Use HCS for policy documents; use XLS-70 for grant state.
 
 ## Purpose
 
@@ -17,12 +21,11 @@ The `anchorRef` field on a PolicyGrant identifies the on-chain location of the a
 | Format | Rail | Example |
 |--------|------|---------|
 | `hcs:{topicId}:{seq}` | Hedera HCS | `hcs:0.0.12345:42` |
-| `xrpl:nft:{tokenId}` | XRPL NFT | `xrpl:nft:ABC123...` |
 
 ## Usage
 
 ```typescript
-import { hederaHcsAnchorPolicyDocument, checkXrplNftRevocation } from "mpcp-service/anchor";
+import { hederaHcsAnchorPolicyDocument } from "mpcp-service/anchor";
 
 const policyDoc = { version: "1.0", policyHash: "a1b2c3...", issuedAt: "2026-01-01T00:00:00Z" };
 
@@ -44,9 +47,9 @@ const grant = createPolicyGrant({
 
 ```typescript
 interface PolicyAnchorResult {
-  anchorRef: string;         // "hcs:{topicId}:{seq}" | "xrpl:nft:{tokenId}"
+  anchorRef: string;         // "hcs:{topicId}:{seq}"
   rail: AnchorRail;
-  txHash?: string;           // XRPL transaction hash
+  txHash?: string;           // Optional ledger record id (implementation-specific)
   topicId?: string;          // Hedera HCS topic ID
   sequenceNumber?: string;   // Hedera HCS sequence number
   anchoredAt?: string;       // ISO 8601
@@ -72,21 +75,6 @@ The Hedera HCS adapter publishes policy documents to a Hedera Consensus Service
 - `MPCP_HCS_POLICY_TOPIC_ID` — HCS topic ID for policy anchoring
 - `HEDERA_NETWORK` (optional) — `testnet` or `mainnet`, default `testnet`
 
-## XRPL NFT Adapter
-
-The XRPL NFT adapter mints an NFT on the XRP Ledger representing the policy document. The NFT token ID becomes the `anchorRef`.
-
-**Revocation check:** Use `checkXrplNftRevocation(tokenId)` to verify whether the NFT has been burned (which signals policy revocation).
-
-```typescript
-import { checkXrplNftRevocation } from "mpcp-service/anchor";
-
-const revoked = await checkXrplNftRevocation("ABC123...");
-if (revoked) {
-  // Policy has been revoked on-chain
-}
-```
-
 ## XRPL Payment Memos
 
 Every XRPL payment submitted via the Trust Gateway includes an `mpcp/grant-id` memo field. This provides a lightweight on-chain audit trail linking each payment to its PolicyGrant — even without a full policy document anchor.

docs/implementation/l1-ecosystem-evaluation.md

@@ -39,7 +39,7 @@ Adding a second rail is a protocol-level decision. It requires:
 | Identity | `did:xrpl` | On-ledger DID method; XLS-70 Credentials for grant liveness |
 | Offline friendliness | Strong | Trust Bundle + signature verification; no chain client needed |
 | Tooling | Good | `xrpl.js`, testnet faucet, well-documented |
-| MPCP integration | Deep | Anchor adapters, DID resolver, NFT revocation, stablecoin profile, golden vectors |
+| MPCP integration | Deep | Anchor adapters, DID resolver, XLS-70 credential revocation, stablecoin profile, golden vectors |
 
 **Assessment:** Production-ready for MPCP v1.0. No gaps.
 

docs/implementation/verifier.md

@@ -21,7 +21,7 @@ If any check fails, verification fails with a specific reason.
 | SBA | Signature valid; expiresAt not passed; sessionId, policyHash match |
 | SBA → decision | Budget not exceeded; rail, asset, destination in allowlists |
 | Settlement | Amount, rail, destination, asset match SBA constraints |
-| anchorRef | If present on PolicyGrant, format validated (`hcs:{topicId}:{seq}` or `xrpl:nft:{tokenId}`) |
+| anchorRef | If present on PolicyGrant, format validated (`hcs:{topicId}:{seq}`) |
 
 ## Usage
 
@@ -102,7 +102,7 @@ Settlement bundles for development and conformance testing may include `sbaPubli
 
 ## Dispute Verification
 
-When a settlement is disputed, `verifyDisputedSettlement` runs full chain verification plus optional policy anchor verification. If the PolicyGrant has an `anchorRef` (e.g., to Hedera HCS or XRPL NFT), the anchor can be checked to confirm the policy document was published before the settlement.
+When a settlement is disputed, `verifyDisputedSettlement` runs full chain verification plus optional policy anchor verification. If the PolicyGrant has an `anchorRef` (e.g., to Hedera HCS), the anchor can be checked to confirm the policy document was published before the settlement.
 
 See [Dispute Resolution](https://github.com/mpcp-protocol/mpcp-spec/blob/main/docs/guides/dispute-resolution.md) for the guide.
 

docs/implementation/xrpl-stablecoin-profile.md

@@ -26,7 +26,7 @@ Policies using this profile must include:
 - `allowedAssets`: Array of `{ kind: "IOU", currency: string, issuer: string }`
 - `destinationAllowlist` (in SBA): XRPL account addresses allowed as payment destinations
 - `maxAmountMinor`, `expiresAt` per standard MPCP
-- `anchorRef` (optional): on-chain policy document anchor (`hcs:{topicId}:{seq}` or `xrpl:nft:{tokenId}`)
+- `anchorRef` (optional): on-chain policy document anchor (`hcs:{topicId}:{seq}`)
 
 ## Wallet Expectations
 

docs/reference/sdk.md

@@ -36,7 +36,7 @@ const grant = createPolicyGrant({
   allowedAssets: [{ kind: "IOU", currency: "RLUSD", issuer: "rIssuer" }],
   expiresAt: "2030-12-31T23:59:59Z",
   // Optional: on-chain anchor reference for this policy document
-  // anchorRef: "hcs:0.0.12345:42" | "xrpl:nft:ABC123..."
+  // anchorRef: "hcs:0.0.12345:42"
 });
 
 // Signed (requires MPCP_POLICY_GRANT_SIGNING_PRIVATE_KEY_PEM — returns null if not set)

docs/reference/service-api.md

@@ -69,15 +69,13 @@ Publish a policy document to a ledger and return an `anchorRef` for use in Polic
 // Hedera HCS (requires MPCP_HCS_POLICY_TOPIC_ID, MPCP_HCS_OPERATOR_ID, MPCP_HCS_OPERATOR_KEY)
 const result = await anchorPolicyDocument(policyDoc, { rail: "hedera-hcs" });
 // result.anchorRef: "hcs:{topicId}:{sequenceNumber}"
-
-// XRPL NFT
-const result = await anchorPolicyDocument(policyDoc, { rail: "xrpl-nft" });
-// result.anchorRef: "xrpl:nft:{tokenId}"
 ```
 
-Supported rails: `hedera-hcs`, `xrpl-nft`.
+Supported rail: **`hedera-hcs`** (policy document anchoring).
+
+> **Removed / superseded:** The former `xrpl-nft` rail (NFTokenMint/Burn for policy anchors) is no longer supported. **Grant liveness** (whether a grant is still valid) is handled separately via **XLS-70** `CredentialCreate` / `CredentialDelete` on XRPL — not via policy `anchorRef`.
 
-The returned `anchorRef` can be stored on the PolicyGrant (`grant.anchorRef`) to provide on-chain auditability.
+The returned `anchorRef` can be stored on the PolicyGrant (`grant.anchorRef`) to provide on-chain auditability of the **policy document** (HCS).
 
 ---