Status Lists & Revocation

{
  "credentialStatus": {
    "id": "https://beltic.com/status/dev-credentials.json#12345",
    "type": "StatusList2021Entry",
    "statusListCredential": "https://beltic.com/status/dev-credentials.json",
    "statusListIndex": "12345"
  }
}

import { parseStatusEntry, decodeStatusList, isBitSet, StatusListCache } from '@beltic/sdk';

const entry = parseStatusEntry(credential.credentialStatus);
const cache = new StatusListCache(300000);  // 5-minute TTL

const statusList = await cache.fetch(entry.statusListCredential);
const isRevoked = isBitSet(statusList, entry.statusListIndex);

if (isRevoked) {
  throw new Error('Credential has been revoked');
}

// Bitstring: one bit per credential
const bitstring = new Uint8Array(Math.ceil(maxCredentials / 8));

// Revoke credential at index 12345
const index = 12345;
bitstring[Math.floor(index / 8)] |= (1 << (index % 8));

// Compress and encode
const compressed = gzip(bitstring);
const encoded = base64(compressed);

// Publish as JSON
const statusList = {
  "@context": ["https://w3.org/2018/credentials/v1"],
  "type": "StatusList2021Credential",
  "id": "https://beltic.com/status/dev-credentials.json",
  "encodedList": encoded
};

try {
  const isRevoked = await checkStatus(credential);
  if (isRevoked) reject();
} catch (error) {
  // Status service down - apply risk-based policy
  if (highRiskOperation) {
    reject();  // Fail closed
  } else {
    logWarning('Status check failed, allowing with audit');
    allow();   // Fail open with logging
  }
}