vc-revocation
The durable half of credential lifecycle: recording that a verifiable credential is revoked, and reading back the set of revoked ids. A revocation is an attributed append to a journal and a fold over that journal's events, so it outlives the process and a second party can see it — which is what puts it above the rings while issuing, verifying and presenting a credential stay pure in cx-stdlib/vc. The two halves meet as data: the folded set is handed to a verifier through opts.revoked, never fetched by it.
vc-revocation:revoke
[$vc-revocation:revoke] -> element — Append an attributed revoke event for the given credential id to a revocation journal; the attribution {actor, authority} is required because the journal forbids an anonymous append.
vc-revocation:revoked-set
[$vc-revocation:revoked-set] -> element — Fold a revocation journal's events into the current set of revoked credential ids, the value a verifier reads through opts.revoked.