Privacy-first design

Your identity is not the product.

Privacy commitments, unfinished locality rules, and the principle that connected applications receive only the minimum attestation they need.

Locality without a public address dossier

Locality-related rules remain unfinished and must answer:

  • Is locality merely declared, visually inspected, document-supported, or independently validated?
  • Is a utility bill, lease, letter, or other evidence copied, stored, hashed, recorded, or immediately returned?
  • Does the resulting attestation reveal an exact address, broad jurisdiction, or another category?
  • Who may see the locality result?
  • Does a locality claim expire separately from proof of human?
  • How does a participant update or dispute the locality claim?
  • Can a connected application see the underlying evidence or only the attestation result?

Design principle: Connected applications should receive the minimum attestation result required for the use case—not the participant’s private evidence package.

Rate My Representatives credential integration is planned and must not receive private committee evidence unless a future, explicit, lawful, and consent-based rule provides otherwise.