You'll notice
Revoked-credentials cleanup now returns a fallback result instead of nothing when it fails
What
When the cleanup process for revoked credentials fails, it used to return nothing at all, leaving callers with no information. Now, on failure, it returns a synthesized result that marks every credential name as revoked with a fixed cause code, giving callers something usable instead of an empty result.
Why
This means that if the cleanup process errors out, the rest of the system still gets a sensible, if pessimistic, answer to work with, rather than crashing or silently getting nothing back.