Specification

Evaluation specification

The evidence artifacts served at https://idn-server.onrender.com/v1/v1/attestations/* are consumed and evaluated under this specification, version idn-1.0.

This page renders the specification from content/spec.md. The full claim-by-claim text is being finalized; the structure below is stable.

Roles

Upstream source, Agent, Receiving party, Target system. An upstream source signs evidence about an agent and its sponsor; the receiving party evaluates that evidence under its own policy; the target system issues its own Target Receipt if it acts. A valid credential does not oblige the receiving party to accept.

Evidence wire format

A compact JWS over an evidence object: subject and sponsor references, issuer, issued-at, expires-at, assurance tier, tenure, and scope. Signatures use EdDSA (Ed25519), with a forward path to ML-DSA.

The four cross-verifications

An evaluation profile specifies how Subject, Authorization, Status and Outcome are checked, across five independent judgments: signature valid, issuer trusted, status fresh, authorization sufficient, and local responsibility acceptable.

Evaluation profiles

Default plus domain profiles (for example anti-fraud, IoT, and cross-border) that tighten which judgments the receiving party requires before an allow.

Status freshness

Status is published as a W3C Status List 2021 bitmap so revocation and account state can be checked offline at the moment of evaluation.

Standards alignment

W3C DID Core and VCDM 2.0, SD-JWT-VC, RFC 7515 (JWS), RFC 8037 (Ed25519), OpenID AIIM, GLEIF vLEI, and ISO 15118-20.