pub trait RevocationProvider {
// Required method
fn is_revoked(&self, cert_id: &str) -> Result<bool, String>;
}Expand description
Pluggable provider for revocation state (SPEC §17.1).
Implementations return Ok(true) for revoked, Ok(false) for live, and
Err(...) to surface a lookup failure. A provider error is fail-closed:
the bundle is rejected with error_reason="revocation_error: ..." —
SDKs MUST NOT treat a lookup failure as “not revoked.” On the verifier’s
hot path; implementations should be O(1) at call time.