Below is the default values in the SKFS FIDO Policy "authenticatorStatusReport" JSON object that determines whether the SKFS will accept an authenticator depending on its status found in the cached MDS.

"mds": {
  "authenticatorStatusReport": [
  {
    "status": "FIDO_CERTIFIED_L1",
    "priority": "1",
    "decision": "IGNORE"
  },
  {
    "status": "FIDO_CERTIFIED_L2",
    "priority": "1",
    "decision": "ACCEPT"
  },
  {
    "status": "UPDATE_AVAILABLE",
    "priority": "5",
    "decision": "IGNORE"
  },
  {
    "status": "REVOKED",
    "priority": "10",
    "decision": "DENY"
  }],
  ...
}

When checking, SKFS looks for the authenticator status object from the MDS; based on the status, it will check the current FIDO policy and act accordingly. It can either ignore, deny, or accept the request.