marketnow_check_revocation
Check the revocation status of an Agent Trust Card (card_id) or CA key (kid) against the signed MarketNow Revocation Registry (MNR-CRL-1.0) + live ledger. Returns VALID/EXPIRED/REVOKED/SUPERSEDED/UNKNOWN with PERMIT/DENY recommendation. Fail-closed: unknown subjects answer UNKNOWN+DENY. The signed CRL layer is independently verifiable via Ed25519 (RFC 8785 JCS).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| kid | No | CA key ID (e.g. mn-ca-002, mn-ca-003) | |
| nonce | No | Optional client nonce — echoed in the response (anti-replay) | |
| card_id | No | Agent Trust Card ID (e.g. ATC-2026-1509360) |