Marking a file public does not publish it. Publishing is a separate decision by somebody with the authority to make it.
The exact version, its fingerprint, who authorised the release, what for, where it went and how it can be withdrawn.
Only an approved, checked copy is ever published. Originals, drafts and anything confidential never leave LEAT's own protected delivery.
A corrected version is published at a new address. There is no "latest" link that quietly changes underneath somebody.
It stops LEAT serving the file. New requests fail and the caches are told to drop it.
It does not recall copies people already downloaded. Nothing can. If a document has been public, assume somebody has a copy.
That is why the decision to publish is the careful one, and withdrawal is the tidy-up.