Protocol / Credentials

Credentials

OpenCredentials — holder-bound vc+sd-jwt credentials that the Node verifies before minting a policy session.

Credentials

OpenCredentials: holder-bound vc+sd-jwt credentials that the Node verifies before minting a policy session.

Concepts

  • OpenCredentials — The credentials system: issuer identity did:web:issuer.credentials.org plus the witness API at witness.credentials.org.
  • Witness Service — TEE issuer running holder-bound acquisitions (8-digit mailbox codes) for the exact-email and email-domain profiles.
  • SD-JWT VC — The selectively-disclosable format, wrapped in a vc+sd-jwt envelope the Node verifies in-tree.
  • Feeds the Policy Engine — How a credential, checked once at mint, becomes a policy session delegation.