Components
Request Flow
Trust Boundaries
The frontend is not trusted with secret keys, credential signing keys, or source-of-truth proof evaluation. It presents user choices and submits requests. The backend is trusted to:- verify wallet signatures,
- index Stellar transactions,
- evaluate proof conditions,
- sign credentials,
- enforce revocation,
- avoid leaking hidden financial data.
- issuer status,
- proof commitment existence,
- proof revocation,
- schema and protocol configuration.
Testnet First
The first implementation targets Stellar testnet. Mainnet should wait until:- contracts have independent review,
- credential signing and key rotation are hardened,
- privacy logging restrictions are tested,
- issuer governance is documented,
- public verification language is reviewed.