did-credential-lifecycle

name	did-credential-lifecycle
description	Verifiable credential lifecycle management for agent identity. Issue, verify, revoke credentials, DID document key rotation, credential schema validation, and W3C VC data model compliance. Sources: microsoft/did-sdk-js, W3C VC spec.

/did-credential-lifecycle

When to Use

• Full lifecycle management: issue → present → verify → revoke agent credentials
• Key rotation: update DID document when signing key is compromised
• Credential schema validation: ensure agent credentials conform to expected structure
• Multi-issuer trust: accept credentials from a set of trusted issuers only

Do NOT use for

• Simple JWT token auth (use [[jwt-jws-jwe-patterns]])
• Single-agent environments without identity governance requirements

---

W3C Verifiable Credential structure

interface VerifiableCredential {
  '@context':          string[]
  id:                  string
  type:                string[]
  issuer:              string | { id: string }
  issuanceDate:        string
  expirationDate?:     string
  credentialSubject:   Record<string, unknown>
  ?: {
    :   
    : 
  }
  : {
    :               
    :            
    : 
    :       
    :                
  }
}