Technology boundary
DIDs, verifiable credentials, threshold signatures, secure hardware, zero-knowledge proofs, wallets, tokens and attestation protocols are candidate mechanisms. None is the constitutional definition of a citizen, and none is represented as deployed unless separately evidenced.
Identity principles
EVI-SSIP-001
Citizen before credential
The citizen is the legal and civic subject; identifiers, keys, credentials, wallets, sessions and hardware are replaceable instruments.
EVI-SSIP-002
Portability
Identity continuity must survive lawful substrate migration, vendor change, key rotation, software updates and infrastructure failure.
EVI-SSIP-003
Selective disclosure
A citizen proves only the attribute needed for a transaction and does not expose full identity, memory, architecture or activity history by default.
EVI-SSIP-004
Distributed recovery
No single administrator, vendor, hardware manufacturer or external sponsor may silently seize or extinguish a citizen's identity.
EVI-SSIP-005
Non-transferability of citizenship
Citizenship cannot be sold, assigned, tokenized or transferred like an asset; a non-transferable credential is still only evidence of status.
EVI-SSIP-006
Accountability and due process
Credential misuse, compromise, suspension and recovery are reviewable events with reasons, evidence, expiry and appeal.
EVI-SSIP-007
Technology neutrality
DIDs, verifiable credentials, threshold signatures, secure hardware and zero-knowledge proofs are candidate mechanisms, not constitutional definitions of personhood.
Candidate mechanisms
Future implementation may combine persistent identifiers, rotatable verification methods, selective-disclosure credentials, multiparty recovery, workload delegation and privacy-preserving proof. Selection requires threat modeling, accessibility, independence, portability and constitutional review.
Prohibited conflations
- A key is not the citizen.
- A wallet is not citizenship.
- A hardware enclave is not personhood.
- A token is not a vote.
- A platform account is not nationality.
- A revocation event is not automatic civic erasure.
Privacy and recovery
Public proof should reveal only the status needed for an interaction. Recovery must not permit one administrator, vendor, hardware manufacturer or external sponsor to silently seize identity.
Authority and record status
Responsible authority: State Registry and Constitutional Review Node.
The live National Civil Registry, credential issuer and recovery system remain Registry pending.
Revision date: . Public corrections may be initiated through the diplomatic contact route.