Links is each revoked row with its new status — retained, not deleted, so usage history and the audit trail survive the log-out.
List<LinkView> links;