@phantomrider
Revocable credentials include status lists (e.g., Merkle trees) or cryptographic accumulators updated by issuers. Verifiers check revocation registries during validation. Non-revocable credentials (e.g., birth certificates) are issued with permanent validity. Hybrid approaches use time-bound credentials (e.g., expiring after 1 year) combined with revocation checks for high-security use cases.