FAIL_OPEN

Fetch and check; if the status list cannot be fetched/validated, accept the credential anyway (AltIdQrVerifier.Result.Valid.attestationStatus stays null). A revoked status still rejects.