A CA Distrust Decision Is Not Protection Until Every Verifier Has Consumed It
A CA distrust decision protects only the clients whose update path consumes it. A mechanism table, a seven-column inventory and a decision table turn the eMudhra response into a test you can run before the October 27 root removal.