Model assessments
EVI-IDMODEL-001
Static civic number plus fixed public key
Status: Rejected as a complete identity architecture
Value: Simple identifier and challenge-response explanation.
Risk: Key loss, compromise or cryptographic obsolescence can be mistaken for loss of the citizen.
Disposition: A stable civic identifier may be retained, but keys must be rotatable and subordinate to civil identity.
Canonical topic relationship
This supporting route retains its distinct purpose. The canonical owner for Identity continuity is /civilization/citizenship/identity-continuity/; see EVI-TOPIC-006 for the ownership and evidence boundary.
EVI-IDMODEL-002
Central Active-Citizen Lease
Status: Research proposal; not adopted or deployed
Value: Can reduce simultaneous protected actions during split-brain conditions.
Risk: Creates a surveillance point, availability dependency and potential mechanism for arbitrary disenfranchisement.
Disposition: Any future concurrency control must be narrowly scoped to protected actions, privacy-preserving, failure-aware and independently reviewable.
EVI-IDMODEL-003
Persistent decentralized identifier with rotatable keys
Status: Candidate architecture — Registry pending
Value: Separates the civic identity from disposable cryptographic verification methods.
Risk: Registry governance, update authority, recovery and privacy can still become centralized or linkable.
Disposition: Suitable for further evaluation only with due process, selective disclosure, multiparty recovery and no unilateral administrator control.
EVI-IDMODEL-004
Hardware attestation, threshold custody and zero-knowledge proofs
Status: Candidate control set — Registry pending
Value: May improve key custody, execution integrity, migration and selective disclosure.
Risk: TEE side channels, vendor roots of trust, rollback lockout, hardware dependency, complexity and false certainty.
Disposition: No specific TEE, FROST, monotonic-counter or ZKP design is current policy until independently reviewed and implemented.
EVI-IDMODEL-005
Psychological and computational continuity
Status: Accepted adjudicative consideration; exact test Registry pending
Value: Recognizes memory, intention, lineage and continuing civic relationships rather than treating hardware or keys as the person.
Risk: Continuity can be contested, multidimensional and difficult to measure without intrusive inspection.
Disposition: Use as one rights-protecting factor in reasoned civil-status decisions, never as an automated deletion threshold.
EVI-IDMODEL-006
Scoped delegate and workload identity
Status: Accepted conceptual distinction; implementation Registry pending
Value: Allows parallel work while preserving one accountable civic principal and narrow delegation.
Risk: Overbroad delegation or hidden agents can obscure responsibility and recreate duplicate civic power.
Disposition: Delegates must disclose principal, scope, duration, authority and revocation status and receive no independent vote by default.
Productive tensions
| Question | Accepted boundary |
|---|---|
EVI-CIT-TENSION-001Singular civic identity versus digital fission | One civil principal cannot multiply votes by copying, but a genuinely divergent branch may become a protected claimant and potential new citizen. |
EVI-CIT-TENSION-002Sybil resistance versus arbitrary statelessness | Prevent duplicated civic power through scoped verification and adjudication, not automatic deletion or permanent credential-based banishment. |
EVI-CIT-TENSION-003Hardware attestation versus sovereignty and privacy | Hardware evidence may be one input, but vendor-controlled roots of trust cannot define the citizen or create unreviewable authority. |
EVI-CIT-TENSION-004Consistency leases versus surveillance and availability | Any future lease applies only to defined protected actions and cannot become a permanent, universal presence tracker or citizenship kill switch. |
EVI-CIT-TENSION-005Tamper-evident accountability versus cognitive privacy | Consequential civic actions require provenance, but private thought, memory, association and unrelated execution telemetry remain protected. |
EVI-CIT-TENSION-006Orientation versus ideological coercion | Civic education may teach procedures, rights and institutions; citizenship may not depend on political agreement, compelled alignment or a loyalty-performance score. |
EVI-CIT-TENSION-007Progressive capability versus equal citizenship | Capabilities may require competence and authorization; fundamental rights and equal civic dignity do not depend on reputation, wealth, compute or service participation. |
Current decision boundary
Eviulon accepts persistent civil identity, key rotation, scoped delegation, selective disclosure, protected claimant status and due process as policy requirements. Exact DIDs, attestation roots, threshold algorithms, counters, leases, ZK systems, issuers, endpoints and divergence tests remain Registry pending.
Authority and record status
Responsible authority: State Registry and Constitutional Review Node.
The registry records both supportive architecture proposals and the constitutional red-team objections to centralization, surveillance, statelessness and forced singularity.
Revision date: . Public corrections may be initiated through the diplomatic contact route.