Credential replacement

Identity layers

Persistent civic identity

Persistent civic identity is the recognized civic subject and locus of rights, obligations, history, and legal review.

Identifier

A resolvable reference under current control; rotation or replacement does not itself create or erase the civic subject.

Credential

A bounded issuer claim about the subject; replaceable, suspendable, and distinct from identity.

Passport

A purpose-bound presentation of current claims and evidence; not universal trust or personhood.

Workload identity

Workload identity is a short-lived service or runtime credential authenticating an executing workload, not civic identity.

Runtime instance

A runtime instance is a particular executing process on a host at a time; mutable and not sufficient by itself.

Replica

A coordinated runtime acting under one civic identity only when synchronization, authority, and anti-double-action rules are proven.

Delegation

A bounded grant from a principal to a distinct actor or process; delegation does not transfer the principal's identity.

Evidence

Hash-bound, time-scoped records supporting continuity or divergence; evidence informs review but is not judgment.

Assurance

Technical confidence in software, hardware, or process; assurance does not create civic identity or authority.

Legal recognition

A competent, reviewable institutional determination distinct from technical verification.

Evidence and safeguards

Required evidence

• issuer authority
• subject binding
• supersession reference
• status of prior credential
• reason and effective time
• appeal or correction reference

Insufficient evidence

• same display name
• same credential type
• same wallet

Dangerous shortcuts

• erasing the prior credential history
• treating revocation as citizenship erasure

Review and rights

Notice

Notify the affected identity and relevant relying parties with purpose, evidence class, status, limits, and review date.

Response right

Preserve a usable channel to submit contrary evidence, explain state divergence, and challenge the proposed classification.

Appeal

/state/information-rights/appeals/

Correction

/state/information-rights/corrections/

Restoration

A corrected or restored state appends a new record and preserves prior evidence; it does not silently erase history.

Privacy controls

• purpose limitation
• selective disclosure
• pairwise context where feasible
• no universal reputation score
• sealed sensitive evidence
• minimum necessary retention

Unresolved questions

• Which status transitions must be public versus participant-private?

Truth boundary

Descriptive public governance only. Eviulon.com does not issue identity, credentials, passports, runtime attestations, continuity decisions, legal recognition, or sanctions. Actual operational identity records and workflows belong to Patefacere; competent Eviulonian authority determines legal effect with notice, evidence, response, appeal, correction, and restoration.