{
  "slug": "credential-zombies",
  "title": "The licence was revoked in March. The credential still verifies.",
  "summary": "A credential proves it was issued. It does not prove it is still valid. Why verifiers skip revocation checks, and what the web already learned fixing this.",
  "lede": "A credential is issued once and checked many times, and its status can change at any point in between. Almost every verification in the world checks the signature and not the status, which produces a specific and dangerous artifact: a credential that is cryptographically perfect and semantically dead.",
  "date": "2026-09-10",
  "reading_time": "17 min read",
  "category": "Standards",
  "tags": [
    "credential revocation",
    "verifiable credentials",
    "status list",
    "licence verification",
    "digital wallets",
    "primary source verification",
    "credentialing"
  ],
  "image": "https://cdn.twc.sh/images/igcache/Credential%20Zombies/1200_630/blog.jpg",
  "url": "/blog/credential-zombies.html",
  "wordcount": 3862,
  "related": [
    "what-is-attestation-chain",
    "verified-work-passport",
    "manav-vs-w3c-vc"
  ],
  "schema": "Article"
}