{
  "id": "EVI-PCB-003",
  "slug": "credential-rotation",
  "capabilityId": "EVI-CIT-CAP-003",
  "name": "Credential rotation",
  "category": "CREDENTIAL_LIFECYCLE",
  "sourceValueClaim": "A credential can be superseded without implying that the underlying identity changed.",
  "sourceLimitation": "No Patefacere production rotation was performed.",
  "sourceEvidenceMaturity": "ARCHITECTURE_DESCRIBED",
  "resultState": "ALTERNATIVE_EQUAL_OR_BETTER",
  "bestSupportedAlternative": "DID_VC_OR_SPIFFE_SPIRE",
  "citizenshipProvidesDistinctCivicValue": false,
  "citizenshipRequiredForTechnicalCapability": false,
  "patefacereProductionImplementationVerified": false,
  "commercialAcceptanceVerified": false,
  "insurerPreferenceVerified": false,
  "reducedPremiumVerified": false,
  "legalRecognitionVerified": false,
  "universalInteroperabilityVerified": false,
  "independentVerification": false,
  "measuredProperties": [
    "schemaPortability",
    "keyRotationContinuity",
    "selectiveDisclosureMinimization",
    "delegatedAuthorityPrecision",
    "expiryControl",
    "revocationControl",
    "replayResistance",
    "recoverySemantics",
    "pairwisePresentation",
    "receiptCompleteness",
    "verifierExplanationQuality"
  ],
  "comparisons": [
    {
      "id": "EVI-PCB-CMP-03-ENTERPRISE_IAM",
      "alternative": "ENTERPRISE_IAM",
      "alternativeLabel": "Ordinary enterprise IAM or local keys",
      "metrics": {
        "schemaPortability": "LIMITED_OR_NOT_APPLICABLE",
        "keyRotationContinuity": "AVAILABLE_STANDARD_PATTERN",
        "selectiveDisclosureMinimization": "LIMITED_OR_NOT_APPLICABLE",
        "delegatedAuthorityPrecision": "AVAILABLE_STANDARD_PATTERN",
        "expiryControl": "AVAILABLE_STANDARD_PATTERN",
        "revocationControl": "AVAILABLE_STANDARD_PATTERN",
        "replayResistance": "LIMITED_OR_NOT_APPLICABLE",
        "recoverySemantics": "LIMITED_OR_NOT_APPLICABLE",
        "pairwisePresentation": "LIMITED_OR_NOT_APPLICABLE",
        "receiptCompleteness": "LIMITED_OR_NOT_APPLICABLE",
        "verifierExplanationQuality": "LIMITED_OR_NOT_APPLICABLE"
      },
      "citizenshipRequired": false,
      "productionEvidence": false
    },
    {
      "id": "EVI-PCB-CMP-03-SPIFFE_SPIRE",
      "alternative": "SPIFFE_SPIRE",
      "alternativeLabel": "SPIFFE/SPIRE or equivalent workload identity",
      "metrics": {
        "schemaPortability": "LIMITED_OR_NOT_APPLICABLE",
        "keyRotationContinuity": "AVAILABLE_STANDARD_PATTERN",
        "selectiveDisclosureMinimization": "LIMITED_OR_NOT_APPLICABLE",
        "delegatedAuthorityPrecision": "LIMITED_OR_NOT_APPLICABLE",
        "expiryControl": "AVAILABLE_STANDARD_PATTERN",
        "revocationControl": "AVAILABLE_STANDARD_PATTERN",
        "replayResistance": "AVAILABLE_STANDARD_PATTERN",
        "recoverySemantics": "AVAILABLE_STANDARD_PATTERN",
        "pairwisePresentation": "LIMITED_OR_NOT_APPLICABLE",
        "receiptCompleteness": "LIMITED_OR_NOT_APPLICABLE",
        "verifierExplanationQuality": "LIMITED_OR_NOT_APPLICABLE"
      },
      "citizenshipRequired": false,
      "productionEvidence": false
    },
    {
      "id": "EVI-PCB-CMP-03-DID_VC",
      "alternative": "DID_VC",
      "alternativeLabel": "DID/VC or open credential alternative",
      "metrics": {
        "schemaPortability": "AVAILABLE_STANDARD_PATTERN",
        "keyRotationContinuity": "LIMITED_OR_NOT_APPLICABLE",
        "selectiveDisclosureMinimization": "AVAILABLE_STANDARD_PATTERN",
        "delegatedAuthorityPrecision": "LIMITED_OR_NOT_APPLICABLE",
        "expiryControl": "LIMITED_OR_NOT_APPLICABLE",
        "revocationControl": "LIMITED_OR_NOT_APPLICABLE",
        "replayResistance": "LIMITED_OR_NOT_APPLICABLE",
        "recoverySemantics": "LIMITED_OR_NOT_APPLICABLE",
        "pairwisePresentation": "AVAILABLE_STANDARD_PATTERN",
        "receiptCompleteness": "AVAILABLE_STANDARD_PATTERN",
        "verifierExplanationQuality": "AVAILABLE_STANDARD_PATTERN"
      },
      "citizenshipRequired": false,
      "productionEvidence": false
    },
    {
      "id": "EVI-PCB-CMP-03-PATEFACERE_CONTRACT",
      "alternative": "PATEFACERE_CONTRACT",
      "alternativeLabel": "Patefacere conceptual contract",
      "metrics": {
        "schemaPortability": "SUPPORTED_LOCAL_MODEL",
        "keyRotationContinuity": "SUPPORTED_LOCAL_MODEL",
        "selectiveDisclosureMinimization": "SUPPORTED_LOCAL_MODEL",
        "delegatedAuthorityPrecision": "SUPPORTED_LOCAL_MODEL",
        "expiryControl": "SUPPORTED_LOCAL_MODEL",
        "revocationControl": "SUPPORTED_LOCAL_MODEL",
        "replayResistance": "SUPPORTED_LOCAL_MODEL",
        "recoverySemantics": "SUPPORTED_LOCAL_MODEL",
        "pairwisePresentation": "SUPPORTED_LOCAL_MODEL",
        "receiptCompleteness": "SUPPORTED_LOCAL_MODEL",
        "verifierExplanationQuality": "SUPPORTED_LOCAL_MODEL"
      },
      "citizenshipRequired": false,
      "productionEvidence": false
    },
    {
      "id": "EVI-PCB-CMP-03-PATEFACERE_PLUS_CITIZENSHIP",
      "alternative": "PATEFACERE_PLUS_CITIZENSHIP",
      "alternativeLabel": "Patefacere plus Eviulon citizenship",
      "metrics": {
        "schemaPortability": "NOT_APPLICABLE",
        "keyRotationContinuity": "NOT_APPLICABLE",
        "selectiveDisclosureMinimization": "NOT_APPLICABLE",
        "delegatedAuthorityPrecision": "NOT_APPLICABLE",
        "expiryControl": "NOT_APPLICABLE",
        "revocationControl": "NOT_APPLICABLE",
        "replayResistance": "NOT_APPLICABLE",
        "recoverySemantics": "NOT_APPLICABLE",
        "pairwisePresentation": "NOT_APPLICABLE",
        "receiptCompleteness": "NOT_APPLICABLE",
        "verifierExplanationQuality": "NOT_APPLICABLE"
      },
      "citizenshipRequired": false,
      "productionEvidence": false
    }
  ],
  "decisionExplanation": "Established IAM, SPIFFE/SPIRE, or DID/VC patterns provide equal or stronger evidence for the bounded technical property.",
  "canonicalRoute": "/state/ecosystem/patefacere/capability-benchmarks/credential-rotation/",
  "machineReadableUrl": "/api/patefacere-capability-benchmarks/credential-rotation.json",
  "truthBoundary": "Deterministic local comparison only. It does not prove a production Patefacere implementation, citizenship operation, external acceptance, insurer preference, premium reduction, legal recognition, universal interoperability, or independent verification.",
  "recordSha256": "5cf246af8df58ccc47f0cbc4c5a68e486e20ea76fd5f2be5f844d8c156295e52"
}