igrantio-dcql-trusted-authoritylisted

# DCQL: trusted authority restriction ## Scenario A verifier requests a University Degree credential, accepting it only if issued by an authority on the EU/EWC Trust List (or EBSI / an OpenID Federation trust anchor). Credentials from issuers outside the trust anchor (e.g. a plain `did:key` issuer) are rejected. **Before you build**: run the integrator intake in `igrantio-ows-overview` - environment, API key, tenancy, backend host, webhooks, frontend - one question at a time, a recommended default with each. ## The DCQL query ```json { "credentials": [ { "id": "university_degree_credential", "format": "dc+sd-jwt", "multiple": false, "meta": { "vct_values": [ "https://credentials.example.com/identity_credential" ] }, "trusted_authorities": [ { "type": "etsi_tl", "values": [ "https://raw.githubusercontent.com/EWC-consortium/ewc-trust-list/refs/heads/main/EWC-TL.xml" ] } ] } ] } ``` ## Run it on OWS 1. Store the query as a presentation definition (`igrantio-ows-overview` api-reference §3), keep the `presentationDefinitionId`. 2. Send the verification request (v3) with `requestByReference: true` (api-reference §2.1); render the QR or use the DC API (`igrantio-dcapi-android` / `igrantio-dcapi-ios`). 3. On `presentation_acked`, require `verified === true` and check `isVerifiedWithTrustList` / `trustServiceProvider` in the history.