"Revoking badges" is a thing that the Open Badges standard built in.
For us, in theory, when we award badges, if we decide we've messed up we can then revoke them.
This is done by PUTting to that badge using the API. There's a boolean for whether something is revoked or not, and the 'issuer' also has a link to a list of badges that were revoked.