Add a strict authenticated global revocation-transition log with bounded-memory append and recovery scanning. Preserve current revocation semantics while establishing the scalable persistence substrate for later authority cutover, derived indexing, checkpointing, and streamed CRL snapshots.