diff --git a/docs/en/trust.rst b/docs/en/trust.rst
index 793b9ae82..34313c4d1 100644
--- a/docs/en/trust.rst
+++ b/docs/en/trust.rst
@@ -602,7 +602,7 @@ The Wallet Instance provides its Wallet Attestation within the signed request du
Trust Chain
^^^^^^^^^^^^^^^
-The Trust Chain is a sequence of verified statements that validates a participant's compliance with the Federation. It has an expiration date time, beyond which it MUST be renewed to obtain the fresh and updated metadata. The expiration date of the Trust Chain is determined by the earliest expiration timestamp among all the expiration timestamp contained in the statements. No Entity can force the expiration date of the Trust Chain to be higher than the one configured by the Trust Anchor.
+The Trust Chain is a sequence of verified statements that validates a participant's compliance with the Federation. It has an expiration date time, beyond which it MUST be renewed to obtain the fresh and updated metadata. The expiration date of the Trust Chain is determined by the earliest expiration timestamp among all the expiration timestamp contained in the statements. No Entity can force the expiration date of the Trust Chain to be higher than the one configured by the Trust Anchor.
Below is an abstract representation of a Trust Chain.
@@ -628,6 +628,152 @@ Below is a non-normative example of a Trust Chain in its original format (JSON A
The entire Trust Chain is verifiable by only possessing the Trust Anchor's public keys.
+Trust List
+^^^^^^^^^^^^^^^
+
+The Wallet Providers MUST be published in a Trust List managed by the designed Federation authority.
+
+To ensure coherent and efficient management of trust lists across Europe, the following structured approach must be implemented. This includes the creation and governance of a Superior Trust List at the European level and National Trust Lists at the member state level. The sections below provide specific implementation details for each type of trust list, including formats and examples.
+
+The **Superior Trust List** must be managed by a central entity at the European level, such as the European Commission. It will include direct references to each National Registry and each centrally managed thematic Registry, unique for all member states. The governance is centralized under a single EU authority, authorized to add, remove, or update entries in the registry.
+
+Below is a non-normative example of a Superior Trust List in XML format:
+
+.. code-block:: xml
+
+
+
+
+ 5
+ 342
+ http://uri.etsi.org/TrstSvc/TrustedList/TSLType/EUlistofthelists
+
+ European Commission
+ Commission européenne
+ Commissione europea
+
+
+
+
+ Rue de la Loi/Wetstraat 200
+ Brussels
+ 1049
+ BE
+
+
+ Rue de la Loi 200
+ Bruxelles
+ 1049
+ BE
+
+
+
+ mailto:EC-TL-Service@ec.europa.eu
+ https://ec.europa.eu/digital-agenda/en/eu-trusted-lists-certification-service-providers
+
+
+
+ EU: List of trusted service providers
+ UE : Liste des prestataires de services de confiance
+ UE: Elenco dei prestatori di servizi fiduciari
+
+
+ https://ec.europa.eu/tools/lotl/eu-lotl-pivot-341.xml
+ https://ec.europa.eu/tools/lotl/eu-lotl-legalnotice.html#en
+
+ http://uri.etsi.org/TrstSvc/TrustedList/StatusDetn/EUlistofthelists
+
+ http://uri.etsi.org/TrstSvc/TrustedList/schemerules/EUlistofthelists
+
+ EU
+
+ This list is maintained by the European Commission and contains information provided by Member States.
+ Cette liste est maintenue par la Commission européenne et contient des informations fournies par les États membres.
+ Questo elenco è mantenuto dalla Commissione europea e contiene informazioni fornite dagli Stati membri.
+
+
+
+
+The **National Trust List** ia managed by a Supervisory Body. This entity will receive requests from accredited and authoritative entities for the respective themes they manage. The Trust List will include direct references to each National List and to the Superior Trust List for each centrally managed cross-border thematic Trust List, unique to all member states.
+
+The Trusted Lists exist for the following entities:
+
+* Wallet Providers
+* PID Providers
+* QEAA Providers
+* PuB-EAA Providers
+* Access Certificate Authorities for:
+ * Relying Parties
+ * PID Providers
+ * QEAA Providers
+
+Below is a non-normative example of a National Trust List in XML format:
+
+.. code-block:: xml
+
+
+
+
+ 5
+ 1
+ http://uri.etsi.org/TrstSvc/TrustedList/SchemeType/EUgeneric
+
+ Agenzia per l'Italia Digitale
+
+
+ http://uri.etsi.org/TrstSvc/TrustedList/SchemeType/Community
+
+
+
+ http://example.com/other-tsl.xml
+
+
+
+
+
+
+
+ Example Service Italia S.p.A.
+
+
+
+
+ Via Nazionale, 50
+ Roma
+ 00184
+ IT
+
+
+
+
+ http://www.exampleserviceitalia.it/info
+
+
+
+
+
+ http://uri.etsi.org/TrstSvc/Svctype/CA/QC
+
+ CN=XYZ Extended Validation SHA256 - CA 3, OU=Trust Service Provider, O=XYZ S.p.A., C=IT
+
+ granted
+ 2023-06-01T00:00:00Z
+
+
+ MIIBIjANBgkq...
+
+
+
+
+
+
+
+
+
+.. note::
+
+ The National and Superior Trust List are in XML format, following the schema defined by the `the European Commission `_.
+
Offline Trust Attestation Mechanisms
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
diff --git a/docs/en/wallet-attestation.rst b/docs/en/wallet-attestation.rst
index 6e93d8b53..69c837591 100644
--- a/docs/en/wallet-attestation.rst
+++ b/docs/en/wallet-attestation.rst
@@ -15,7 +15,7 @@ The following requirements for the Wallet Attestation are met:
- The Wallet Attestation MUST use the signed JSON Web Token (JWT) format;
- The Wallet Attestation MUST give all the relevant information to attests the **integrity** and **security** of the device where the Wallet Instance is installed.
- The Wallet Attestation MUST be signed by the Wallet Provider that has authority over and that is the owner of the Wallet Solution, as specified by the overseeing registration authority. This ensures that the Wallet Attestation uniquely links the Wallet Provider to this particular Wallet Instance.
-- The Wallet Provider MUST ensure the integrity, authenticity, and genuineness of the Wallet Instance, preventing any attempts at manipulation or falsification by unauthorized third parties.
+- The Wallet Provider MUST ensure the integrity, authenticity, and genuineness of the Wallet Instance, preventing any attempts at manipulation or falsification by unauthorized third parties. The Wallet Provider MUST also verify the Wallet Instance by using the App Store vendor's API, for Android is *Play Integrity API* and for iOS is *DeviceCheck*, these services are defined in this specification as **Device Integrity Service (DIS)**.
- The Wallet Attestation MUST have a mechanism in place for revoking the Wallet Instance, allowing the Wallet Provider to terminate service for a specific instance at any time.
- The Wallet Attestation MUST be securely bound to the Wallet Instance ephemeral public key.
- The Wallet Attestation MAY be usable multiple times during its validity period, allowing for repeated authentication and authorization without the need to request new attestations with each interaction.