Workspace

Help Center

How the privacy-preserving architecture works, what each control does, and the vocabulary used across the workspace.

Architecture in one pass

Local-first, zero-PII, zero-trust

1. Issuance. An authority signs a credential and delivers it to the holder's device. The platform stores no copy.
2. Custody. Key material and metadata are encrypted at rest in the local vault. The vault key never leaves the device.
3. Presentation. The holder releases a selective-disclosure proof to a verifier and receives a consent receipt.
4. Decision. The decision engine evaluates rule predicates deterministically and emits a signed explanation trace.
5. Record. The outcome, rule version, and proof hash are appended to the hash-chained ledger for audit.

Common tasks

Privacy, integrity, and recovery

Terms used across the workspace

Proof ID: Public identifier for a selective-disclosure proof derived from a credential.
Proof hash: Digest binding a proof to its issuing credential without revealing its contents.
Attestation: Signed statement from an authenticator that key material is hardware-protected.
Rule version: Immutable identifier for the rule set in force when a decision was made.
Freshness window: Maximum age of a proof accepted by the current federal rule version (45 days).
Chain link: Hash tying an audit entry to its predecessor, making the ledger append-only.