STATUS MODEL REGISTRYARCHITECTURE INVARIANT
Independent dimensions stay independent.
DPP lifecycle, credential status, ownership/custody claims, device certificates and runtime trust are separate policy-correlated state models.
STATUS DOMAIN
DPP lifecycle
Lifecycle authority and product-group policy determine allowed transitions.
ManufacturedMarket placedIn useEnd-of-lifeRecycled
STATUS DOMAIN
Credential status
Credential status is independent from device trust and DPP lifecycle.
ValidSuspendedRevokedExpired
STATUS DOMAIN
Ownership / custody claim
Separate claim types may use different evidence and authorities.
AssertedVerifiedTransferredDisputedExpired
STATUS DOMAIN
Device certificate status
Private Device PKI or applicable certificate source is authoritative for certificate status.
ValidSuspendedRevokedExpired
STATUS DOMAIN
Runtime device trust
A policy/risk decision; certificate validity alone does not determine runtime trust.
TrustedConditionalQuarantinedUntrusted
CRITICAL SEPARATION
Ownership ≠ certificate status ≠ runtime trust.
Suspending a certificate is an enforcement/certificate lifecycle action; it does not rewrite legal ownership or DPP lifecycle state.
OWNERSHIP / CUSTODY ≠ DEVICE CERTIFICATE ≠ RUNTIME DEVICE TRUST